The URL Bar Is Part of the Browser’s Security Boundary
Modern browsers ask users to treat web content as untrusted while trusting the browser frame around it. A website can control its own text, images, forms, animation, and visual design, but it is not supposed to control the browser’s account...