CVE-2019-13704
Insufficient policy enforcement in navigation in Google Chrome prior to 78.0.3904.70 allowed a remote attacker to bypass content security policy via a crafted HTML page.
Date published : 2019-11-25
https://chromereleases.googleblog.com/2019/10/stable-channel-update-for-desktop_22.html