mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-28 17:22:02 +00:00
900 B
900 B
CVE-2019-11737
Description
If a wildcard ('*') is specified for the host in Content Security Policy (CSP) directives, any port or path restriction of the directive will be ignored, leading to CSP directives not being properly applied to content. This vulnerability affects Firefox < 69.
POC
Reference
- https://bugzilla.mozilla.org/show_bug.cgi?id=1388015
- https://bugzilla.mozilla.org/show_bug.cgi?id=1388015
Github
No PoCs found on GitHub currently.