The ServiceWorkerContainer::registerServiceWorkerImpl function in WebKit/Source/modules/serviceworkers/ServiceWorkerContainer.cpp in Blink, as used in Google Chrome before 51.0.2704.63, allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a ServiceWorker registration.
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: Chrome
Published:
Updated: 2024-08-05T23:02:12.978Z
Reserved: 2016-01-12T00:00:00
Link: CVE-2016-1682

No data.

Status : Modified
Published: 2016-06-05T23:59:11.227
Modified: 2024-11-21T02:46:52.697
Link: CVE-2016-1682
