Missing case-insensitive matching for CSS url function

URL filtering, such as relative URLs and URL scheme limits, is not always applied when CSS sanitization is used. When the inner URL is quoted, CSS url"" is matched case-sensitively, when it should be matched case-insensitively. As a result, while url"" gets the intended domain name filtering, URL...

Google Pixel injection vulnerability

Google Pixel is a smartphone from Google, Inc USA. Google Pixel suffers from an injection vulnerability that originates in getView of AddAppNetworksFragment.java, due to improper input validation, which may mislead the user about a network add request, which may result in local privilege escalati...