Content Security Policy bypass via WebKit logic error

WebKit logic errors in Apple iOS and iPadOS before 15.1 and macOS before 12.0.1 allow remote attackers to bypass Content Security Policy. When WebKit processes maliciously crafted web content, its restriction logic leaves the page's declared Content Security Policy unexpectedly unenforced; Apple has not disclosed the specific faulty code path or rule evaluation. A user must load attacker-controlled web content, after which protections intended to restrict script or resource behavior do not apply, enabling unauthorized page behavior rather than code execution outside the browser.