Insufficient policy enforcement in WebSockets in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
https://www.debian.org/security/2020/dsa-4606
https://security.gentoo.org/glsa/202003-08
https://seclists.org/bugtraq/2020/Jan/27
https://chromereleases.googleblog.com/2019/12/stable-channel-update-for-desktop.html