Google patches for account acquisitions and MFA bypass chromium vulnerabilities

He wrote: “Unlike other browsers, Chrome solves the link header on subresource requests. But what is the problem? The problem is that the link header can set the referral layer – we can specify an insecure url and capture the full query parameters.”

A website uses a link header to tell the browser about important page resources, such as images, which should be preloaded. This speeds up response time as part of an HTTP response that occurs before the browser encounters any HTML. When a browser usually looks for resources on a third-party server, it transmits a URL containing information about the requesting site as permitted by the referral assignment.

Unfortunately, in Chrome, this URL can also contain information with security, such as an OAuth stream for authentication.