Comment by adzm

6 hours ago

> with a simple fetch(...) with credentials included, you can easily grab any Microsoft Edge user’s email from any website

Wow, this is disturbing on its own

I was shocked at the popup blocker bypass, then the UXSS. Really impressive endurance to take this all the way to ACE.