As anyone can see network data using browser developer tool, can someone get access to my cookies or API keys by just turning on the developer tool in Chrome or Firefox?
For example, imagine a webapp that sends api key in header with each request. Could someone see this key by just turning on "inspect" in Chrome?
Likewise, if i have an active Facebook session and I gave my system to someone for browsing, could they check for cookies or api keys by just using "inspect" in Chrome?
Is there any way to avoid this?