A team of researchers from the University of Wisconsin-Madison has uploaded to the Chrome Web Store a proof-of-concept extension that can steal plaintext passwords from a website's source code.
  • argv_minus_one@beehaw.org
    7·
    2 years ago

    Well, yeah, of course they can. They can read the entire DOM, including the value of password fields. Were you expecting otherwise?