[run] attacker_pdf=658B victim_pdf=660B [run] launching chrome: /chromium/chromium/src/out/asan/chrome --headless=new --no-sandbox --disable-dev-shm-usage --no-first-run --no-default-browser-check --disable-gpu --enable-logging=stderr --enable-features=ApiMimeHandler --user-data-dir=/tmp/poc-profile-mr2pwxrg --load-extension=/poc-artifacts/extension --remote-debugging-port=19222 --remote-allow-origins=* --host-resolver-rules=MAP attacker.test 127.0.0.1,MAP victim.test 127.0.0.1 about:blank [run] navigating to http://attacker.test:18080/attacker/x.pdf [run] committed URL -> http://attacker.test:18080/attacker/x.pdf [run] committed URL -> http://victim.test:18080/victim/real.pdf [run] FINAL omnibox URL = http://victim.test:18080/victim/real.pdf [run] tab title = 'victim.test real document' [run] wrote screenshot.png ====================================================================== Omnibox / committed URL : http://victim.test:18080/victim/real.pdf Tab title (PDF /Title) : 'victim.test real document' attacker PDF /Title : 'ATTACKER_SPOOFED_DOCUMENT' victim PDF /Title : 'victim.test real document' RESULT: omnibox shows victim URL; rendered-body provenance inconclusive via title -- inspect screenshot.png ======================================================================