Chrome DevTools blocks pasting into the Console; typing "allow pasting" unlocks it
A developer reports that Chrome's DevTools blocked a pasted code snippet in the Console and displayed a self-XSS warning in a newly created profile. The workaround is to paste once to trigger the warning, then type the exact phrase "allow pasting" without quotes and press Enter, after which pasting works. The warning appears only for profiles with fewer than five Console history entries, and the setting is stored per profile, so it returns on new profiles or after restoring defaults. The article warns that self-XSS scams can use pasted code to read cookies and storage or call site APIs as the user, and it recommends reviewing any code before running it.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in