Groups keyboard shortcuts have been updated

Dismiss

See shortcuts

Security-dev

1–30 of 753

This is a public Google Group for discussions relating to security engineering and development for Chromium. Looking forward to exciting and open discussions happening here!

0 selected

Jan 9

Click-fix: detecting and preventing malicious use of user clipboard

Hello Security-dev, I reviewed open discussions and didn't see reference to the following topic,

unread,

Click-fix: detecting and preventing malicious use of user clipboard

Hello Security-dev, I reviewed open discussions and didn't see reference to the following topic,

Jan 9

zl, … Matt Mueller5

Jan 6

Best way to benchmark Chromium's X509 validation performance

Hi all, Hope you had a good break! I noticed that both the old version that I'm testing ( https:/

unread,

Best way to benchmark Chromium's X509 validation performance

Hi all, Hope you had a good break! I noticed that both the old version that I'm testing ( https:/

Jan 6

ISHWAR KUMAR, Amy Ressler3

12/16/24

Broken Link at Project Zero Blog-post - https://googleprojectzero.blogspot.com/p/working-at-project-zero.html

security-dev@ and 0-day-in-the-wild@ moved to BCC Hello, Thanks for reaching out. I've moved

unread,

Broken Link at Project Zero Blog-post - https://googleprojectzero.blogspot.com/p/working-at-project-zero.html

security-dev@ and 0-day-in-the-wild@ moved to BCC Hello, Thanks for reaching out. I've moved

12/16/24

Nico Weber, … Jordan Brown6

12/16/24

Moving README.security info into README.chromium?

Thanks for offering to help, we discussed it and will likely just move the content to the description

unread,

Moving README.security info into README.chromium?

Thanks for offering to help, we discussed it and will likely just move the content to the description

12/16/24

Drs.s. Shirzad, Arthur Sonzogni2

12/13/24

Re: Issue 379779784: [WPT] New failures introduced in external/wpt/content-security-policy by import https://crrev.com/c/6033423

(Removing security-dev@ that was added mistakenly to the bug) On Friday, December 13, 2024 at 9:45:16

unread,

Re: Issue 379779784: [WPT] New failures introduced in external/wpt/content-security-policy by import https://crrev.com/c/6033423

(Removing security-dev@ that was added mistakenly to the bug) On Friday, December 13, 2024 at 9:45:16

12/13/24

Matic Dakskofler, Lily Chen2

12/2/24

Dangerous download blocked

Hi Matic, The Search Console is the correct place to look for Security Issues related to download

unread,

Dangerous download blocked

Hi Matic, The Search Console is the correct place to look for Security Issues related to download

12/2/24

manager AGYSOFT, Daniel Rubery2

11/8/24

Inquiry Regarding Requirements to Prevent Our Installer from Being Blocked by Chrome

Hello, There is no action the Chrome team can take here. It sounds like you have found the relevant

unread,

Inquiry Regarding Requirements to Prevent Our Installer from Being Blocked by Chrome

Hello, There is no action the Chrome team can take here. It sounds like you have found the relevant

11/8/24

10/31/24

Q3 2024 Summary from Chrome Security

Hello everyone, Here's our regular update on what Chrome Security has been doing in Q3 of 2024.

unread,

Q3 2024 Summary from Chrome Security

Hello everyone, Here's our regular update on what Chrome Security has been doing in Q3 of 2024.

10/31/24

10/22/24

chrome://flags/#unsafely-treat-insecure-origin-as-secure on mobile

Is there a way to enable chrome://flags/#unsafely-treat-insecure-origin-as-secure on Chrome for

unread,

chrome://flags/#unsafely-treat-insecure-origin-as-secure on mobile

Is there a way to enable chrome://flags/#unsafely-treat-insecure-origin-as-secure on Chrome for

10/22/24

Sintel Jamie, … Ashly Schwan3

10/21/24

Downloading "blob" blocked by Chrome

Hi team, Recently a javascript application is unable able to save generated file content in Chrome,

unread,

Downloading "blob" blocked by Chrome

Hi team, Recently a javascript application is unable able to save generated file content in Chrome,

10/21/24

10/17/24

Looking for developers who know how to use Seccomp for a paid study

Hello As Chromium uses Seccomp to implement its sandbox, I thought that I might be able to find

unread,

Looking for developers who know how to use Seccomp for a paid study

Hello As Chromium uses Seccomp to implement its sandbox, I thought that I might be able to find

10/17/24

Thomas Lukaszewicz

10/17/24

Build-Time WebUI Code Cache

Hey all, The Chrome Desktop team is considering leveraging build-time generated JS code caches to

unread,

Build-Time WebUI Code Cache

Hey all, The Chrome Desktop team is considering leveraging build-time generated JS code caches to

10/17/24

10/11/24

Hello As Chromium uses Seccomp to implement its sandbox, I thought that I might be able to find

unread,

Hello As Chromium uses Seccomp to implement its sandbox, I thought that I might be able to find

10/11/24

10/8/24

New mailing list: memory-safety-dev@chromium.org

Kentaro created a new list specifically for memory safety discussions. If you're interested in

unread,

New mailing list: memory-safety-dev@chromium.org

Kentaro created a new list specifically for memory safety discussions. If you're interested in

10/8/24

10/7/24

Behaviour of Chrome in blocking non SameSite and non Secure cookie in HTTP sites

Hi All, I wanted to understand Chrome's behaviour in handling non SameSite and non Secure cookies

unread,

Behaviour of Chrome in blocking non SameSite and non Secure cookie in HTTP sites

Hi All, I wanted to understand Chrome's behaviour in handling non SameSite and non Secure cookies

10/7/24

10/7/24

Chrome Full Access Hack

Just recently, my Google Chrome canary was hacked, leading to fraud transactions. Does Chrome have

unread,

Chrome Full Access Hack

Just recently, my Google Chrome canary was hacked, leading to fraud transactions. Does Chrome have

10/7/24

9/30/24

Hello, Is Google STS still available? Is it part of CTS? I have already downloaded and set up the CTS

unread,

Hello, Is Google STS still available? Is it part of CTS? I have already downloaded and set up the CTS

9/30/24

Chase Phillips, … Charlie Reis4

9/18/24

How to support strict CSP with PDF viewing's injected HTML + inline CSS response?

Sorry for the delay-- we discussed this in the CSA meeting yesterday to consider the options. - Could

unread,

How to support strict CSP with PDF viewing's injected HTML + inline CSS response?

Sorry for the delay-- we discussed this in the CSA meeting yesterday to consider the options. - Could

9/18/24

Alex Cooper, Emily Stark2

8/16/24

Adding new Site Settings/Page Info Entry

Hi Alex, Putting this new permission below the "AR" entry sounds fine to me. Thanks! Emily

unread,

Adding new Site Settings/Page Info Entry

Hi Alex, Putting this new permission below the "AR" entry sounds fine to me. Thanks! Emily

8/16/24

7/19/24

Q2 2024 Summary from Chrome Security

Greetings, This is what the Chrome Security team have been doing in the second quarter of 2024. Real-

unread,

Q2 2024 Summary from Chrome Security

Greetings, This is what the Chrome Security team have been doing in the second quarter of 2024. Real-

7/19/24

Matic Dakskofler, Daniel Rubery3

6/3/24

Dangerous download blocked

Yes that should definitely be showing up in Security Issues. I'll file a bug internally since

unread,

Dangerous download blocked

Yes that should definitely be showing up in Security Issues. I'll file a bug internally since

6/3/24

Gregory Huey, Arthur Sonzogni2

5/30/24

Explain why Chromium thinks this download is so dangerous that I should not be allowed to download it.

Hi Gregory, Thank you for your feedback. For further discussion and feature requests, I encourage you

unread,

Explain why Chromium thinks this download is so dangerous that I should not be allowed to download it.

Hi Gregory, Thank you for your feedback. For further discussion and feature requests, I encourage you

5/30/24

Robert Anderson

5/28/24

help im new but not dumb

Dear Security, I know i have people gettin whats app numbers w the same last two numbers as the phone

unread,

help im new but not dumb

Dear Security, I know i have people gettin whats app numbers w the same last two numbers as the phone

5/28/24

4/25/24

Q1 2024 Summary from Chrome Security

Hello, It's 2024! Here's a summary of what Chrome Security has been working on in the first

unread,

Q1 2024 Summary from Chrome Security

Hello, It's 2024! Here's a summary of what Chrome Security has been working on in the first

4/25/24

Wei Nee Teh, … Glassisimooptic11

4/24/24

ERR_BLOCKED_BY_CLIENT

I found that download and using this extension help https://chromewebstore.google.com/detail/adobe-

unread,

ERR_BLOCKED_BY_CLIENT

I found that download and using this extension help https://chromewebstore.google.com/detail/adobe-

4/24/24

4/8/24

Looking for developers who know how to use Seccomp for a paid study

Hello As Chromium uses Seccomp to implement its sandbox, I thought that I might be able to find

unread,

Looking for developers who know how to use Seccomp for a paid study

Hello As Chromium uses Seccomp to implement its sandbox, I thought that I might be able to find

4/8/24

Ryan Gonzalez, … Amir Omidi7

4/1/24

Adding support for the Flatpak sandbox for Flatpak distribution

TIL! Thanks! Amir Omidi (he/them) On Fri, Mar 29, 2024 at 14:04 Wayne Buerkle <wtbu...@gmail.com

unread,

Adding support for the Flatpak sandbox for Flatpak distribution

TIL! Thanks! Amir Omidi (he/them) On Fri, Mar 29, 2024 at 14:04 Wayne Buerkle <wtbu...@gmail.com

4/1/24

Bart Groot, Lily Chen2

2/29/24

Download warning

Hi Bart, Could you share a screenshot of the specific warning you got? It's hard to tell what

unread,

Download warning

Hi Bart, Could you share a screenshot of the specific warning you got? It's hard to tell what

2/29/24

Ikkurthi, Sivaji, Adrian Taylor3

2/21/24

RE: same type of image/output is not loading second time in chrome

Thanks for getting in touch, but this is a list for discussion of security aspects of the Chromium

unread,

RE: same type of image/output is not loading second time in chrome

Thanks for getting in touch, but this is a list for discussion of security aspects of the Chromium

2/21/24

amer alagha, Marc-Antoine Ruel2

2/8/24

Chrome auto-updates on Linux now, right?.

No, it sounds correct to me. Le jeu. 21 déc. 2023, à 03 h 39, amer alagha <ameral...@gmail.com

unread,

Chrome auto-updates on Linux now, right?.

No, it sounds correct to me. Le jeu. 21 déc. 2023, à 03 h 39, amer alagha <ameral...@gmail.com

2/8/24

Search

Clear search

Close search

Google apps

Main menu