Stealing Secrets from Developers Localhost Development using Websockets

[hauleth]

PSA: Do not use .local for your local development domain. It is reserved for mDNS and you should use .localhost which is currently reserved but unassigned to anything.