Browser console

A browser console is a developer-tool interface for viewing messages and running JavaScript in a selected browser execution context, often the open web page.

Developers use the console to understand errors, inspect a page, and test changes. Reading an error message is different from executing code someone has supplied. The console can evaluate JavaScript, including statements that change the open page.

A support request can become code execution

A person claiming to fix an account may ask the user to open developer tools and paste instructions. Chrome calls the social-engineering pattern self-XSS when someone is persuaded to execute malicious browser code themselves. The legitimate website does not have to be a fake login page for that request to be dangerous.

Chrome has warnings intended to interrupt some inexperienced console users. Its documentation explains that warning behavior depends on the browser profile’s console history and past choices. The absence of a warning is not an assessment of the supplied code.

If support asks you to paste code, verify the request through your usual support channel before running it. Ask what the code reads or changes. A screenshot of an error and a script executed in your signed-in browser give support very different access.

Our browser-console article covers that support handoff. The ClickFix article examines the related repair pretext when instructions lead to other forms of execution. A browser console and an operating-system terminal are different tools; record which one was actually used.

Sources

See it in practice