Re: CSP Bypass on Android prior to 4.4

Posted by E Boogie on Oct 14

Hello again Full disclosure,

One final email. A couple things to note about this.

I’ve been testing A LOT on A LOT of different browsers and Android
Devices.. The more I test, the more It becomes clear that my u0000
vulnerability is not legit and there is a different much larger CSP issues
at play here. (I did a lot of testing before reporting but there is a lot
going on here that caused me to mess up here).

First – The issue is not that…

Leave a Reply