PT-2015-1900

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 40.0 Description The issue arises from the nsCSPHostSrc::permits function in Mozilla Firefox, which does not implement Content Security Policy Level 2 exceptions for certain URL schemes during wildcard...