Post #2997718

If you're wondering "wait, how is that a security issue?", think about phishing. If an attacker can control the contents of the address bar (even just to make it the same as some other tab/window), then they can make a phishing page that's completely indistinguishable from the real login page they're targeting. Better be using passkeys/U2F!