Hacker News new | ask | show | jobs
by K0nserv 3619 days ago
An attacker could fool the extension to autofill a form on a domain they control with credentials from another domain and send the credentials to their server.