Video Downloader and Video Downloader Plus Chrome Extension Hijack Exploit – UXSS via CSP Bypass (~15.5 Million Affected) – The Hacker Blog

https://thehackerblog.com/video-download-uxss-exploit-detailed/