Content Security Policy Can be bypassed in Chrome
>> YOUR LINK HERE: ___ http://youtube.com/watch?v=nHOuakyHX1E
A recent flow now allows attackers to override CSP by doing the following. Chrome fixed it thankfully. • Resources • Issue 1064676: full CSP bypass while evaluating a javascript-URL in iframe. (CVE-2020-6519) • https://bugs.chromium.org/p/chromium/... • Learn more about CSP • https://developer.mozilla.org/en-US/d... • My XSS video • ๐ญ Backend Engineering Videos • • Backend Engineering (Beginner) • ๐พ Database Engineering Videos • • Database Engineering • ๐ฐ Network Engineering Videos • • Network Engineering • ๐ฐ Load Balancing and Proxies Videos • • Proxies • ๐ Postgres Videos • • PostgresSQL • ๐ขDocker • • Docker • ๐งฎ Programming Pattern Videos • • Programming Patterns • ๐ก Web Security Videos • • Web Security • ๐ฆ HTTP Videos • • HTTP • ๐ Python Videos • • Python by Example • ๐ Javascript Videos • • Javascript by Example • ๐พDiscord Server / discord • Become a Member • / @hnasr • Support me on PayPal • https://bit.ly/33ENps4 • Become a Patreon • / hnasr • Stay Awesome, • Hussein
#############################
