>And second, it just isn't as interesting when you have so much more you can do with XSS, and tampering with password managers is a narrow vector. what can be

>And second, it just isn't as interesting when you have so much more you can do with XSS, and tampering with password managers is a narrow vector. what can be better than GETTING PASSWORD(=full power). I know it was known.