Stealing passwords from infosec Mastodon – without bypassing CSP | Hacker News Reader