[gtsteve]

I would hope that high value target sites such as banks would implement CSPs to prevent that or make it more difficult though.

[pigeonhole123]

You can save the data and exfiltrate through a site without CSP