Writeups

By doing history.back() and history.forward() between two origins it was possible to bypass the multiple file download restriction.
PoC code can be found at https://github.com/NDevTK/DownloadBypass/tree/master
This was fixed in https://issues.chromium.org/issues/40750895