I've read about a technology called "session replay" that uses 3rd party scripts to capture most or all input made by users of a webpage. That includes e.g. text that was pasted, but never sent. It also may include (due to misconfiguration) data such as credit card numbers or passwords. And it can bypass secure connections, if the 3rd party implementation is faulty.
The list of affected websites is pretty impressive, and includes a lot of popular sites.
More information here: https://webtransparency.cs.princeton.ed ... sites.html
My question: Are there features or add-ins that will warn me when I visit a site that uses such a 3rd party extension? Or that will simply cut off these scripts?