CSP bypass

March 26, 2026

WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

A WebRTC-based skimmer is bypassing Content Security Policy protections to exfiltrate payment data from e-commerce sites. Here is what you need to know.