I'm working on a web app with some dynamic forms, that show certain fields based on different form selection choices ... example on one of my forms of some HTML that would be hidden.

The researcher was able to implement the same method to collect sensitive user data entered in form fields ... CSS attribute selectors, which is a mechanism that allows developers to query a page ...