I'm not very familiar with autocomplete behavior, but does this work across domains? on hidden fields? Would this help <malicious website> or even <legit websi

I'm not very familiar with autocomplete behavior, but does this work across domains? on hidden fields? Would this help <malicious website> or even <legit website but with malicious tracking intents> to extract information without my consent?