Zero Day CSP Bypass Vulnerability in Google Chrome Discovered - Almost Every Website In The World Was At RiskBypassing CSP completely can be very bad..
I was extremely surprised when I discovered this zero day vulnerability affecting Chromium based browsers - Chrome, Opera, Edge - on Windows, Mac and Android that allowed attackers to fully bypass CSP rules on Chrome versions 73 (March 2019) through 83 (July 2020).
To better understand the magnitude of this vulnerability - the potentially impacted users are in the billions, with...
Click to expand...
News Zero Day CSP Bypass Vulnerability in Google Chrome Discovered - Almost Every Website In The World Was At Risk
- Thread starter FSBOT
- Start date