[972:972:0518/003717.794171:WARNING:ui/base/idle/idle_linux.cc:111] None of the known D-Bus ScreenSaver services could be used. [972:972:0518/003724.610238:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:304] ================================================ [972:972:0518/003724.610264:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:305] POC RESULT: TYPE_APP window survived uninstall via beforeunload 'Stay'. [972:972:0518/003724.610276:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:307] IsInstalled() = false [972:972:0518/003724.610290:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:309] Out-of-scope URL = https://evil.com:33785/ssl/blank_page.html [972:972:0518/003724.610299:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:310] ShouldShowCustomTabBar() = false [972:972:0518/003724.610308:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:312] GetFormattedUrlOrigin() = '' [972:972:0518/003724.610331:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:314] GetTitle() = 'I am a blank page.' [972:972:0518/003724.610350:ERROR:chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:316] ================================================ ../../chrome/browser/ui/web_applications/web_app_uninstall_browsertest.cc:320: Failure Value of: shows_cct_after_uninstall Actual: false Expected: true VULNERABILITY CONFIRMED: ShouldShowCustomTabBar() returned false for an out-of-scope navigation in a TYPE_APP window whose app has been uninstalled. The window has no omnibox and now no Custom Tab Bar -- arbitrary content renders with zero browser-supplied origin attribution (PWA-window address-bar-spoof equivalent). Stack trace: #0 0x5828dc5a5144 (/chromium/chromium/src/out/asan/browser_tests+0x25471143) #1 0x5828f9934b60 (/chromium/chromium/src/out/asan/browser_tests+0x42800b5f) #2 0x5828f993a6e2 (/chromium/chromium/src/out/asan/browser_tests+0x428066e1) #3 0x5828ead2025b (/chromium/chromium/src/out/asan/browser_tests+0x33bec25a) #4 0x5828ead28afd (/chromium/chromium/src/out/asan/browser_tests+0x33bf4afc) #5 0x5828ead1738d (/chromium/chromium/src/out/asan/browser_tests+0x33be338c) #6 0x5828f242f9e2 (/chromium/chromium/src/out/asan/browser_tests+0x3b2fb9e1) #7 0x5828f2433b29 (/chromium/chromium/src/out/asan/browser_tests+0x3b2ffb28) #8 0x5828f2432fc1 (/chromium/chromium/src/out/asan/browser_tests+0x3b2fefc0) #9 0x5828f242c6f9 (/chromium/chromium/src/out/asan/browser_tests+0x3b2f86f8) #10 0x5828f242ccfd (/chromium/chromium/src/out/asan/browser_tests+0x3b2f8cfc) #11 0x5828f99329ce (/chromium/chromium/src/out/asan/browser_tests+0x427fe9cd) #12 0x5828f735f5d2 (/chromium/chromium/src/out/asan/browser_tests+0x4022b5d1)