Skip to content
This repository has been archived by the owner on Dec 11, 2019. It is now read-only.

[hackerone] 414609 noscript issue #15232

Closed
diracdeltas opened this issue Sep 26, 2018 · 5 comments · Fixed by #15265
Closed

[hackerone] 414609 noscript issue #15232

diracdeltas opened this issue Sep 26, 2018 · 5 comments · Fixed by #15265
Assignees
@jumde
Labels
QA/checked-Linux QA/checked-macOS QA/checked-Win64 QA/test-plan-specified regression regression-range-wanted release/blocking release-notes/include sec-high security
Milestone
0.25.0

Comments

@diracdeltas
Copy link
Member

diracdeltas commented Sep 26, 2018 •
edited by kjozwiak

Test Case

Please go through the test case that was provided by @diracdeltas via QA Slack DM.

Original Reported Issue

https://hackerone.com/reports/414609

verified in latest release
@diracdeltas diracdeltas added this to the 0.25.0 milestone Sep 26, 2018
@jumde jumde self-assigned this Sep 26, 2018
@jumde
Copy link
Contributor

jumde commented Sep 27, 2018 •
edited

Repros on

v.0.24.0
v.0.23.73 
v.0.23.31
v.0.22.810

Does not repro: v.0.22.727

@jumde
Copy link
Contributor

jumde commented Sep 29, 2018

Likely regression with muon 7.0.1

@jumde jumde mentioned this issue Oct 2, 2018
Merged
diracdeltas added a commit that referenced this issue Oct 4, 2018
@diracdeltas
Update to muon 8.1.8, fix noscript issue
7b1a8ac 
fix #15232

Test Plan:
will DM
@diracdeltas diracdeltas mentioned this issue Oct 4, 2018
Merged
10 tasks
This was referenced Oct 5, 2018
Closed
Closed
Closed
@GeetaSarvadnya
Copy link
Collaborator

GeetaSarvadnya commented Oct 5, 2018 •
edited by kjozwiak

Verified on Linux x64

  • 0.25.0 907c7e4
  • Muon 8.1.8
  • libchromiumcontent 69.0.3497.100

Verified with macOS 10.12.6 using

  • 0.25.0 907c7e4
  • Muon 8.1.8
  • libchromiumcontent 69.0.3497.100

Verified on Windows x64

  • 0.25.2 8ea2a9c
  • Muon 8.1.8
  • libchromiumcontent 69.0.3497.100

@diracdeltas diracdeltas mentioned this issue Oct 5, 2018
Closed
@diracdeltas
Copy link
Member Author

credit to xiaoyin liu and david albert

@kjozwiak kjozwiak mentioned this issue Oct 9, 2018
Closed
@xiaoyinl
Copy link

CVE-2018-1000815 was assigned to this bug.

@brave brave locked and limited conversation to collaborators Jan 3, 2019
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees

@jumde jumde

Labels
QA/checked-Linux QA/checked-macOS QA/checked-Win64 QA/test-plan-specified regression regression-range-wanted release/blocking release-notes/include sec-high security
Projects
None yet
Milestone
0.25.0
Development

Successfully merging a pull request may close this issue.

Update to muon 8.1.8, fix noscript issue brave/browser-laptop
5 participants
@diracdeltas @jumde @xiaoyinl @LaurenWags @GeetaSarvadnya