How to configure the safe use of developer mode in the browser to prevent attacks via the console?

Developer tools in modern browsers represent a powerful set of functions for debugging web pages, analyzing network traffic, and testing code. However, attackers often use these capabilities for selfish purposes through a social engineering method known as Self-XSS. Users are persuaded to copy and paste a certain debugging script directly into the browser console, promising non-existent bonuses or features in return, which leads to the instant theft of sessions and authorization tokens.

To prevent such incidents, developers and advanced users must follow strict digital discipline when interacting with the console. You should never paste someone else's program code whose origin is unknown to you, even if the instruction looks convincing and comes from a seemingly trusted source. The browser console has full access to the current user session, so executing a malicious command is equivalent to handing over the keys to the account to attackers.

To reduce risks when working with debugging tools, it is recommended to perform the following actions.