[sha-3]

Is anyone familiar with how the KeePassXC browser extension handles this?

[pieter_mj]

The same way, you can set the extension to automatically fill in and confirm, so it has the same flaw. It is not the default setting afaik.

[derkades]

It's disabled by default, and it's made clear that enabling it is a security risk