You have to completely trust the website owner.
Even if the webpage encrypts the secret using WebCrypto before submitting to server, you still have to completely trust the website owner, because they could change the JavaScript later and reveal the secret.
Some comments have been hidden by the post's author - find out more
For further actions, you may consider blocking this person and/or reporting abuse
We're a place where coders share, stay up-to-date and grow their careers.
You have to completely trust the website owner.
Even if the webpage encrypts the secret using WebCrypto before submitting to server, you still have to completely trust the website owner, because they could change the JavaScript later and reveal the secret.