CVE-2015-6786

Removed by vendor...

CVE-2015-6786

CVE-2015-6786 : In Chrome/Chromium, the CSPSourceList::matches function in CSP allowed a wildcard '*' to match blob:, data:, or filesystem: URLs, bypassing CSP scheme restrictions. Affects Google Chrome before 47.0.2526.73 (Chromium upstream); impact is bypass of CSP restrictions in opportunistic...

CVE-2015-6786: Undefined Security Weakness

The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy CSP implementation in Google Chrome before 47.0.2526.73 accepts a blob:, data:, or filesystem: URL as a match for a pattern, which allows remote attackers to bypass intended scheme...