[hulitu]

Yes, but for this, you need a XSS vulnerability. /s

[devidw]

or a browser extension :)