Endpoint incident returns the URL as "about:blank"
search cancel

Endpoint incident returns the URL as "about:blank"

book

Article ID: 399832

calendar_today

Updated On:

Products

Data Loss Prevention Core Package Data Loss Prevention Data Loss Prevention Endpoint Prevent

Issue/Introduction

Open Outlook in Chrome.
Then click on Event.
The page loads and the URL line shows "about:blank".
When the invitation email is sent and it triggers an incident, that incident shows the URL "about:blank".

Environment

Endpoint Agent: 16.0.10003.60100 and 16.0.10000.60678
Chrome: 133.0.6943.127 (Official Build) (64-bit)
DLP Chrome Extension: 16.0.101 

Note that this is not version specific.

Resolution

The logs indicate that the browser page is loading as an "active page" and it is giving our agent the ACTIVE_URL of "about:blank".

Source: ApplicationState.ApplicationStateService
Message: Updating state  ACTIVE_URL for process 17044 with state data about:blank;

Source: Chrome.ChromeConnector
Message: Intial URL: about:blank, Actual URL: about:blank

This is a browser/Outlook functionality issue.
We are reporting what the browser is giving us.
This is not something that can be corrected within the DLP agent.