• argv_minus_one@beehaw.org
    link
    fedilink
    arrow-up
    7
    ·
    10 months ago

    Well, yeah, of course they can. They can read the entire DOM, including the value of password fields. Were you expecting otherwise?