CVE-2015-6786

CVE-2015-6786 : In Chrome/Chromium, the CSPSourceList::matches function in CSP allowed a wildcard '*' to match blob:, data:, or filesystem: URLs, bypassing CSP scheme restrictions. Affects Google Chrome before 47.0.2526.73 (Chromium upstream); impact is bypass of CSP restrictions in opportunistic...

CVE-2015-6786

Removed by vendor...