Vulnerability Spotlight: Content Security Policy bypass in Microsoft Edge, Google Chrome and Apple Safari
Cisco Talos disclosed Content Security Policy bypass vulnerabilities in Microsoft Edge, older Google Chrome (CVE-2017-5033) and WebKit-based browsers including Apple Safari (CVE-2017-2419), found by Nicolai Grødum of Cisco. Exploitation uses the...