← Back to team overview

desktop-packages team mailing list archive

[Bug 1530363] [NEW] Edit Google Payments opens .sandbox. urls which aren't public

 

Public bug reported:

Under Settings -> Advanced Settings -> Manage Auto-fill settings, you
are offered the ability to view and edit stored credit cards.

If you have used Google Payments, cards from Google Payments
successfully show up here, with a link to edit the card.  Clicking the
edit button attempts to open:

https://wallet-web.sandbox.google.com/manage/w/0/paymentMethods

... which doesn't look like a public url that you're supposed to go to.
It certainly doesn't contain any of my data, even after logging in, so I
can't edit or remove cards from it.  I believe it was looking for:

https://wallet.google.com/manage/w/0/paymentMethods


(There's a whole load of references to these .sandbox. addresses in the source.  Is something supposed to be happening during the build process to fix this?)

ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: chromium-browser 47.0.2526.73-0ubuntu0.15.10.1.1215
Uname: Linux 4.3.0-040300-generic x86_64
NonfreeKernelModules: nvidia
ApportVersion: 2.19.1-0ubuntu5
Architecture: amd64
Date: Thu Dec 31 15:19:51 2015
Desktop-Session:
 'xsession'
 '/etc/xdg/xdg-xsession:/etc/xdg/xdg-xsession:/etc/xdg'
 '/usr/share/xsession:/usr/share/xsession:/usr/local/share/:/usr/share/'
DetectedPlugins:
 
Env:
 'None'
 'None'
InstalledPlugins:
 /usr/lib/mozilla/plugins:
   => libgnome-shell-browser-plugin.so
         (size: 18888 bytes, mtime: Mon Oct 19 13:43:03 2015)
Load-Avg-1min: 0.49
Load-Processes-Running-Percent:   0.1%
MachineType: System manufacturer System Product Name
ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-4.3.0-040300-generic root=UUID=672510b8-afb9-425f-a58d-bd325f7c987a ro rootflags=subvol=@
SourcePackage: chromium-browser
UpgradeStatus: Upgraded to wily on 2015-08-28 (124 days ago)
dmi.bios.date: 12/19/2012
dmi.bios.vendor: American Megatrends Inc.
dmi.bios.version: 1805
dmi.board.asset.tag: To be filled by O.E.M.
dmi.board.name: P8Z77-V
dmi.board.vendor: ASUSTeK COMPUTER INC.
dmi.board.version: Rev 1.xx
dmi.chassis.asset.tag: Asset-1234567890
dmi.chassis.type: 3
dmi.chassis.vendor: Chassis Manufacture
dmi.chassis.version: Chassis Version
dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvr1805:bd12/19/2012:svnSystemmanufacturer:pnSystemProductName:pvrSystemVersion:rvnASUSTeKCOMPUTERINC.:rnP8Z77-V:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
dmi.product.name: System Product Name
dmi.product.version: System Version
dmi.sys.vendor: System manufacturer
gconf-keys: /desktop/gnome/applications/browser/exec = b'firefox\n'/desktop/gnome/url-handlers/https/command = b'sensible-browser %s\n'/desktop/gnome/url-handlers/https/enabled = b'true\n'/desktop/gnome/url-handlers/http/command = b'sensible-browser %s\n'/desktop/gnome/url-handlers/http/enabled = b'true\n'/desktop/gnome/session/required_components/windowmanager = b''/apps/metacity/general/compositing_manager = b''/desktop/gnome/interface/icon_theme = b'gnome\n'/desktop/gnome/interface/gtk_theme = b'Clearlooks\n'
modified.conffile..etc.chromium.browser.default: [modified]
modified.conffile..etc.default.chromium.browser: [deleted]
mtime.conffile..etc.chromium.browser.default: 2015-03-08T12:05:01.795251

** Affects: chromium-browser (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug wily

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to chromium-browser in Ubuntu.
https://bugs.launchpad.net/bugs/1530363

Title:
  Edit Google Payments opens .sandbox. urls which aren't public

Status in chromium-browser package in Ubuntu:
  New

Bug description:
  Under Settings -> Advanced Settings -> Manage Auto-fill settings, you
  are offered the ability to view and edit stored credit cards.

  If you have used Google Payments, cards from Google Payments
  successfully show up here, with a link to edit the card.  Clicking the
  edit button attempts to open:

  https://wallet-web.sandbox.google.com/manage/w/0/paymentMethods

  ... which doesn't look like a public url that you're supposed to go
  to.  It certainly doesn't contain any of my data, even after logging
  in, so I can't edit or remove cards from it.  I believe it was looking
  for:

  https://wallet.google.com/manage/w/0/paymentMethods

  
  (There's a whole load of references to these .sandbox. addresses in the source.  Is something supposed to be happening during the build process to fix this?)

  ProblemType: Bug
  DistroRelease: Ubuntu 15.10
  Package: chromium-browser 47.0.2526.73-0ubuntu0.15.10.1.1215
  Uname: Linux 4.3.0-040300-generic x86_64
  NonfreeKernelModules: nvidia
  ApportVersion: 2.19.1-0ubuntu5
  Architecture: amd64
  Date: Thu Dec 31 15:19:51 2015
  Desktop-Session:
   'xsession'
   '/etc/xdg/xdg-xsession:/etc/xdg/xdg-xsession:/etc/xdg'
   '/usr/share/xsession:/usr/share/xsession:/usr/local/share/:/usr/share/'
  DetectedPlugins:
   
  Env:
   'None'
   'None'
  InstalledPlugins:
   /usr/lib/mozilla/plugins:
     => libgnome-shell-browser-plugin.so
           (size: 18888 bytes, mtime: Mon Oct 19 13:43:03 2015)
  Load-Avg-1min: 0.49
  Load-Processes-Running-Percent:   0.1%
  MachineType: System manufacturer System Product Name
  ProcKernelCmdLine: BOOT_IMAGE=/vmlinuz-4.3.0-040300-generic root=UUID=672510b8-afb9-425f-a58d-bd325f7c987a ro rootflags=subvol=@
  SourcePackage: chromium-browser
  UpgradeStatus: Upgraded to wily on 2015-08-28 (124 days ago)
  dmi.bios.date: 12/19/2012
  dmi.bios.vendor: American Megatrends Inc.
  dmi.bios.version: 1805
  dmi.board.asset.tag: To be filled by O.E.M.
  dmi.board.name: P8Z77-V
  dmi.board.vendor: ASUSTeK COMPUTER INC.
  dmi.board.version: Rev 1.xx
  dmi.chassis.asset.tag: Asset-1234567890
  dmi.chassis.type: 3
  dmi.chassis.vendor: Chassis Manufacture
  dmi.chassis.version: Chassis Version
  dmi.modalias: dmi:bvnAmericanMegatrendsInc.:bvr1805:bd12/19/2012:svnSystemmanufacturer:pnSystemProductName:pvrSystemVersion:rvnASUSTeKCOMPUTERINC.:rnP8Z77-V:rvrRev1.xx:cvnChassisManufacture:ct3:cvrChassisVersion:
  dmi.product.name: System Product Name
  dmi.product.version: System Version
  dmi.sys.vendor: System manufacturer
  gconf-keys: /desktop/gnome/applications/browser/exec = b'firefox\n'/desktop/gnome/url-handlers/https/command = b'sensible-browser %s\n'/desktop/gnome/url-handlers/https/enabled = b'true\n'/desktop/gnome/url-handlers/http/command = b'sensible-browser %s\n'/desktop/gnome/url-handlers/http/enabled = b'true\n'/desktop/gnome/session/required_components/windowmanager = b''/apps/metacity/general/compositing_manager = b''/desktop/gnome/interface/icon_theme = b'gnome\n'/desktop/gnome/interface/gtk_theme = b'Clearlooks\n'
  modified.conffile..etc.chromium.browser.default: [modified]
  modified.conffile..etc.default.chromium.browser: [deleted]
  mtime.conffile..etc.chromium.browser.default: 2015-03-08T12:05:01.795251

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/chromium-browser/+bug/1530363/+subscriptions