Ubuntu Update for firefox USN-1463-1

Ubuntu Update for Linux kernel vulnerabilities USN-1463-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14631.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for firefox USN-1463-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Content Security Policy inline-script bypass — Mozilla

Security researcher Adam Barth found that inline event handlers, such as onclick, were no longer blocked by Content Security Policy's CSP inline-script blocking feature. Web applications relying on this feature of CSP to protect against cross-site scripting XSS were not fully protected...