Hacker News Reader

The warning that displays when bringing up a JavaScript console on their homepage was always enough to steer me clear of that product.

Stop!

reqaccts_js_bundle_jquery_3_6_1?1693888551:2732 This is a feature for developers and researchers! If you are not a developer or researcher, pasting something here could cause your account to be compromised

View on HN

Why? A password manager's web site would be a natural place I'd expect people to fall prey to self-xss attacks. That they had such a warning there feels appropriate, and likely to be the result of actual attacks against users that they'd seen.

That feels sensible to me. Facebook (used to?) do similar.

The risk here is different but you could imagine someone trying to migrate password managers and pasting a script they found on GitHub that purported to help.

Reply on news.ycombinator.com