[178:178:0516/233356.040774:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] loaded; registering ReportingObserver", source: http://b.example.com:8080/victim.html (10) [178:178:0516/233356.041004:INFO:CONSOLE:11] "[ATTACKER http://a.example.com:8080] OK: victim is cross-origin (SecurityError)", source: http://a.example.com:8080/attacker.html (11) [178:178:0516/233356.041039:INFO:CONSOLE:11] "[ATTACKER http://a.example.com:8080] Injecting intervention report into cross-origin victim...", source: http://a.example.com:8080/attacker.html (11) [178:178:0516/233356.041093:INFO:CONSOLE:1] "Ignored attempt to cancel a touchstart event with cancelable=false, for example because scrolling is in progress and cannot be interrupted.", source: INJECTED-BY-ATTACKER (1) [178:178:0516/233356.041143:INFO:CONSOLE:11] "[ATTACKER http://a.example.com:8080] preventDefault() returned; check victim console / ReportingObserver.", source: http://a.example.com:8080/attacker.html (11) [178:178:0516/233356.044753:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] *** ReportingObserver FIRED ***", source: http://b.example.com:8080/victim.html (10) [178:178:0516/233356.044802:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] type = intervention", source: http://b.example.com:8080/victim.html (10) [178:178:0516/233356.044836:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] url = http://b.example.com:8080/victim.html", source: http://b.example.com:8080/victim.html (10) [178:178:0516/233356.044864:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] body.id = IgnoredEventCancel", source: http://b.example.com:8080/victim.html (10) [178:178:0516/233356.044893:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] sourceFile = INJECTED-BY-ATTACKER", source: http://b.example.com:8080/victim.html (10) [178:178:0516/233356.044922:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] line:col = 1:58", source: http://b.example.com:8080/victim.html (10) [178:178:0516/233356.044951:INFO:CONSOLE:10] "[VICTIM http://b.example.com:8080] >>> BUG CONFIRMED: cross-origin attacker injected an intervention report with attacker-controlled sourceFile <<<", source: http://b.example.com:8080/victim.html (10)