description: If Content Security Policy blocked frame navigation, the full destination of a redirect served in the frame was reported in the violation report; as opposed to the original frame URI. This could be used to leak sensitive information contained in such URIs. This vulnerability affects Firefox < 86, Thunderbird < 78.8, and Firefox ESR < 78.8.
problem types: Content Security Policy violation report could have contained the destination of a redirect
affected:
{
product: Firefox
vendor: Mozilla
versions:
status: affected, version: < 86
}
{
product: Thunderbird
vendor: Mozilla
versions:
status: affected, version: < 78.8
}
{
product: Firefox ESR
vendor: Mozilla
versions:
status: affected, version: < 78.8
}
