This reminds of my 9year old vulnerability reported here: https://bugzilla.mozilla.org/show_bug.cgi?id=469939 https://bugzilla.mozilla.org/show_bug.cgi?id=46993

This reminds of my 9year old vulnerability reported here: https://bugzilla.mozilla.org/show_bug.cgi?id=469939 https://bugzilla.mozilla.org/show_bug.cgi?id=469939. Essentially one can trick a user into typing their credentials into a phishing site although it may appear they are using the legitimate site at first glance. The reason this is unfixed is that this is how the web works still.