Lineending

@mo_bergeron @GoSecure_Inc Ah, yes, that's true. If an XSS is in place, nothing can be done except fixing the XSS itself :/

@_lineending @GoSecure_Inc So "autocomplete='off'" doesn't work at all on the testing I've done. As for "new-password" it does work but my point in the article was to show that with an XSS you can add your own inputs without autcomplete attribute and therefore, does not matter if the autocomplete is there.

Are you using the browser’s autofill feature to log in? See how it can be used to steal your credentials with an XSS in this blog post by @mo_bergeron: gosecure.net/blog/2022/06/2… #GoSecureTitanLabs #browser #xss #cybersecurity

Bye bye XSS Auditor👋 "The release also removes support for the XSS Auditor" webkit.org/blog/12445/new…