Design/Logic Flaw

By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and bypass Content Security Policy CSP. This vulnerability affects Firefox 63...

PT-2018-3170

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 63 Description The issue is related to the lack of input sanitization, allowing a remote attacker to bypass the Content Security Policy CSP mechanism. This can be achieved by injecting stylesheets through reflected UR...