description: Insufficient policy enforcement in content security policy in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chrome security severity: Medium)
problem types: Insufficient policy enforcement
affected:
{
vendor: Google
product: Chrome
versions:
version: unspecified, lessThan: 91.0.4472.77, status: affected, versionType: custom
}