3 ms·
Third-party JavaScript running on a domain could similarly steal passwords typed into that domain.
by mdavidn 5y ago
Third-party JavaScript running on a domain could similarly steal passwords typed into that domain.
- herodotus 5y agoTrue, but if I activate the extension, can it steal passwords from any domain I visit?
- lrem 5y agoThe permission this warning is for is "inject arbitrary code into any site", so yes.
- hmottestad 5y agoWould your bank add third party js to their site without vetting it and locking it down? Also, please don’t answer that honestly because lots of banks actually had vulnerabilities that allowed hackers to inject js into their sites to steal login info.