Comment by Chris_Chambers

Wow, so someone thinks XSS matters anymore. How quaint. I, too, remember 2008. Meanwhile, in the current year, we have the Chrome Web Store where thinly veiled de facto UXSS data harvesting plugins pretending to be innocent useful tools are installed by tens of millions of gullible people for whom these insidious hacking vectors are normalized, and no one cares even after their passwords and credit cards have been sent to a C&C server in Tel Aviv.