CVE-2020-6519 PoC — Google Chrome CSP 安全漏洞

Source

https://github.com/PerimeterX/CVE-2020-6519

Associated Vulnerability

Title: Google Chrome CSP 安全漏洞 (CVE-2020-6519)
Description:Policy bypass in CSP in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to bypass content security policy via a crafted HTML page.

Readme

# Chromium 83 Zero Day Full CSP Bypass Cross Platforms

## [CVE-2020-6519](https://nvd.nist.gov/vuln/detail/CVE-2020-6519)

## [Technical Article](https://www.perimeterx.com/tech-blog/2020/csp-bypass-vuln-disclosure/)

## [POC](./POC) (as [reported](https://crbug.com/1064676) to the chromium project)

## [DEMO Vids!](./vids)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →