1 min readSep 25, 2019
Yes, if the access token is kept in Local/Session Storage.
If the extension can read cookies that would be also correct for access tokens kept in cookies.
Written by Damian Rusinek
Security Consultant @ Securing, PhD, Blockchain Security, Cryptography Protocols || Twitter: @drdr_zz