The test page is still vulnerable for me. https://lock.cmpxchg8b.com/SaiGhij5/lastpass.html https://lock.cmpxchg8b.com/SaiGhij5/lastpass.html Chrome 57.0.29

The test page is still vulnerable for me. https://lock.cmpxchg8b.com/SaiGhij5/lastpass.html https://lock.cmpxchg8b.com/SaiGhij5/lastpass.html Chrome 57.0.2987.110 (64-bit) Version: 4.1.42 Built: Thu Mar 09 2017 12:40:16 GMT-0500 (EST) Binary Component: true (Native Messaging version 4.1.34, built Jan 11 2017 01:45:24) Any idea why? I thought no user action was required? No custom error message for NXDOMAIN (I think?), I see the Lastpass site, then calc.exe opens. https://twitter.com/LastPass/status/844176201392504834 https://twitter.com/LastPass/status/844176201392504834