CVE-2015-6786

The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy CSP implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a pattern, which allows remote attackers to bypass intended scheme...

CVE-2015-6786: Undefined Security Weakness

The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy CSP implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a pattern, which allows remote attackers to bypass intended scheme...

PT-2015-7360

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 47.0.2526.73 Opera versions prior to 47.0.2526.73 no specific version mentioned, but implied to be the same as Google Chrome Description The issue lies in the CSPSourceList::matches function within the Content...