In web, yes. You can login to Discord and open a specific link, it'll steal your session token
With proper settings of web page 3rd party link can't get access to token cookies AFAIK If so for discord - that's a security vulnerability of discord
Обсуждают сегодня