Post #1043050
2026-04-01 19:42 UTC
Just noticed a Chrome for Android bug which made the wrong URL (one from a different tab) appear in the address bar. Sadly, it's been long enough since I've worked on a browser that my "oh no, this is a security issue" reaction triggered too late for me to get a screenshot of it. And I've no idea how to repro. Still, fun to know that's there.
Replies (1)
-
@cibyr@omg.wtf.sh 2026-04-01 19:46
If you're wondering "wait, how is that a security issue?", think about phishing. If an attacker can control the contents of the address bar (even just to make it the same as some other tab/window), then they can make a phishing page that's completely indistinguishable from the real login page they're targeting. Better be using passkeys/U2F!