Comment Comment by julian37 Surely the UI code is what responds to clicking "reveal" and therefore, if compromised, could fetch the secret even without a click? parent julian37 3 years ago