https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:47:22 +0000 https://cve.radiocsirt.org/vuln/cve-2016-5135 <p>WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a &#34;Content-Security-Policy: referrer origin-when-cross-origin&#34; header that overrides a &#34;&lt;META name=&#39;referrer&#39; content=&#39;no-referrer&#39;&gt;&#34; element.</p> <p>WebKit/Source/core/html/parser/HTMLPreloadScanner.cpp in Blink, as used in Google Chrome before 52.0.2743.82, does not consider referrer-policy information inside an HTML document during a preload request, which allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted web site, as demonstrated by a &#34;Content-Security-Policy: referrer origin-when-cross-origin&#34; header that overrides a &#34;&lt;META name=&#39;referrer&#39; content=&#39;no-referrer&#39;&gt;&#34; element.</p> https://cve.radiocsirt.org/vuln/cve-2016-5135