[534:534:0406/205604.394373:ERROR:chrome/browser/content_settings/host_content_settings_map_factory.cc:242] [POC] ---- OneTimePermissionProvider ClearAll bug ---- [534:534:0406/205604.394586:ERROR:chrome/browser/content_settings/host_content_settings_map_factory.cc:251] [POC] step1: one-time grant set; GetContentSetting=1 (1=ALLOW) [534:534:0406/205604.394655:ERROR:chrome/browser/content_settings/host_content_settings_map_factory.cc:258] [POC] step2: ClearSettingsForOneType(GEOLOCATION) invoked (same call ProfileResetter / CBD-AllTime makes) [534:534:0406/205604.394701:ERROR:chrome/browser/content_settings/host_content_settings_map_factory.cc:264] [POC] step3: GetContentSetting=1 (1=ALLOW means BUG: grant survived; expected 3=ASK) [534:534:0406/205604.394732:ERROR:chrome/browser/content_settings/host_content_settings_map_factory.cc:268] [POC] *** VULNERABILITY CONFIRMED *** one-time GEOLOCATION grant survived ClearSettingsForOneType. OneTimePermissionProvider::ClearAllContentSettingsRules (one_time_permission_provider.cc:202) returned early for a type it stores -> Profile Reset / CBD All-Time is a no-op for one-time camera/mic/geolocation grants. [534:534:0406/205604.394864:ERROR:chrome/browser/content_settings/host_content_settings_map_factory.cc:288] [POC] sanity: after per-entry SetWebsiteSetting(DEFAULT), GetContentSetting=3 (per-entry path works -> only ClearAll is broken) [534:534:0406/205604.394907:ERROR:chrome/browser/content_settings/host_content_settings_map_factory.cc:291] [POC] ---- end ----