Recently I've been trying to find a way to steal HTTP Basic Authentication credentials via CSRF. For example, if a site is using basic authentication is it possible for an attacker to grab the Authorization header with some sort of proxy hidden in an iframe, or steal it any other way?
I've done some research and nothing I can find really proves this is logically possible.
If anyone has a solid answer, whether this is 100% impossible or actually possible, thanks in advance!