"Exploiting CSP Wildcards for Google Domains"

https://attackshipsonfi.re/p/exploiting-csp-wildcards-for-google

Truth be told, this can be applied to most CSP wildcards.

#security #csp #content-security-policy #web #webdev #appsec