There was this example from 2017. https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/ https:

There was this example from 2017. https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/ https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-u... I seem to remember reading about similar stuff done elsewhere, but don't remember the details (or apparently a useful search term :P).