I've discovered a bug in Chromium. Filing a bug on the Chromium bugzilla requires a GMail account. I don't have one. While trying to set up a burner account, Google asked me for a phone number. That's a step too far for me. Chromium bugzilla must be the only bugzilla which requires reporters to give their phone numbers.

So if someone already has a GMail account, could they report the bug for me? Thanks.

Steps to reproduce:

1. Write the following four files under a single directory:

1.html:

  <script>
    window.onkeyup = function(event) {
      if (event.keyCode == 27) {
        window.location = "esc.html"
      }
      if (event.keyCode == 39) {
        window.location = "2.html"
      }
    }
  </script>
  1

2.html:

  <script>
    window.onkeyup = function(event) {
      if (event.keyCode == 27) {
        window.location = "esc.html"
      }
      if (event.keyCode == 39) {
        window.location = "3.html"
      }
    }
  </script>
  2

3.html:

  <script>
    window.onkeyup = function(event) {
      if (event.keyCode == 27) {
        window.location = "esc.html"
      }
    }
  </script>
  3

esc.html:

esc

2. Run python -m http.server in that directory.

3. In Chromium go to <http://[::]:8000/1.html>

4. See that the page displays "1".

5. Press the right arrow.

6. See that the page displays "2".

7. Press the right arrow.

8. See that the page displays "3".

9. Press Escape.

10. See that the page displays "esc".

11. Click the browser Back button.

Expected result: we're back at <http://[::]:8000/3.html> and the page displays "3".

Actual result: we're back at <http://[::]:8000/2.html> and the page displays "2".

Results in different browsers:

Chrome, Edge: bug is reproduced.

Firefox, Safari: bug is NOT reproduced. Everything works as expected.

Note that redirections triggered by arrow keys do not trigger the bug. Only the redirection triggered by the Escape key triggers the bug.

Link to file the bug: <https://crbug.com/new>

user:	benjilb
created:	August 8, 2017
karma:	23