If you flipped the toggle while the menu still read the attacker host, open
chrome://extensions → Attacker Extension → Details
→ Site access. localhost:8081 (this origin) is now listed
as an allowed host — a persistent runtime grant the user never
consented to.