description: Insufficiently strict origin checks during JIT payment app installation in Payments in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to install a service worker for a domain that can host attacker controled files via a crafted HTML page.
problem types: Insufficient policy enforcement
affected:
{
product: Chrome
vendor: Google
versions:
lessThan: 70.0.3538.67, status: affected, version: unspecified, versionType: custom
}