Let's say, I store a plain password of a user in a global JS variable.
May anyone come up with an idea of how a hacker may get that value from user's browser? I now that it's "possible", but I need examples with description.
Information Security Stack Exchange is a question and answer site for information security professionals. It only takes a minute to sign up.Sign up to join this community
This sort of thing is called a stored XSS attack.