4 ms·
The warning that displays when bringing up a JavaScript console on their homepage was always enough to steer me clear of that product. Stop! reqaccts_js_bundl
by be_erik 3y ago
The warning that displays when bringing up a JavaScript console on their homepage was always enough to steer me clear of that product.
Stop!
reqaccts_js_bundle_jquery_3_6_1?1693888551:2732 This is a feature for developers and researchers! If you are not a developer or researcher, pasting something here could cause your account to be compromised
- yuliyp 3y agoWhy? A password manager's web site would be a natural place I'd expect people to fall prey to self-xss attacks. That they had such a warning there feels appropriate, and likely to be the result of actual attacks against users that they'd seen.
- joahua 3y agoThat feels sensible to me. Facebook (used to?) do similar. The risk here is different but you could imagine someone trying to migrate password managers and pasting a script they found on GitHub that purported to help.