• @WhoRoger@lemmy.world
    link
    fedilink
    English
    71 year ago

    It’s not just autofill. If it’s a different domain, the proxy host is reading your password and sending it though to Lemmy to log you in.

    • Zephyrix
      link
      fedilink
      English
      41 year ago

      This won’t be the case as soon as Lemmy.world fixes their CORS policy.