ParentFull threadandrewnicolalde·Any JavaScript on the same origin can read localstorage IIRC.View on HN