I blocked XSS attacks and API Key extraction in the browser by monkey-patching `crypto.subtle`. Why isn't everyone doing this? August 6, 2026 · Dev.to Read full story at source