Android browser versions prior to 4.4 suffer from a content security policy bypass vulnerability.