The vulnerability allows attackers to bypass Content Security Policy (CSP) protections and steal data from website visitors.
Source: Threadpost