CVE-2016-5135: Improper Input Validation

WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy CSP protection mechanis...

PT-2016-2710

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 52.0.2743.82 Opera versions prior to 52.0.2743.82 Description The issue is related to the WebKit component in the Blink browser, specifically the HTMLPreloadScanner.cpp file. It concerns the lack of checking for...