Hacker News
points by adzm 16 hours ago | 0 comments
> with a simple fetch(...) with credentials included, you can easily grab any Microsoft Edge user’s email from any website

Wow, this is disturbing on its own

[–] MatthiasPortzel 13 hours ago
I was shocked at the popup blocker bypass, then the UXSS. Really impressive endurance to take this all the way to ACE.