Let's say I set this after an api call where I got back a jwt access token:

axios.defaults.headers.post['Authorization'] = "Bearer " + jwtAccessToken;

Is it possible to extract this data with an XSS attack?