4 ms·

I wrote about this a while ago: https://medium.com/@stabbles/why-you-should-disable-autofill-bf2e15c65b5c https://medium.com/@stabbles/why-you-should-disable-au

• danielweber 10y ago
  And Jeremiah Grossman was talking about it a decade ago. It's amazing these problems persist.
• ssttoo 10y ago
  haha, I guess I also reinvented the wheel a few months later :) http://www.phpied.com/oversharing-with-the-browsers-autofill/ http://www.phpied.com/oversharing-with-the-browsers-autofill...
• bored 10y ago
  Also, malicious scripts can change the password input type field to a regular text field and grab it from there.
  • talmand 10y ago
    There's no need to convert the input type to get the plain text value of a password input. It just masks the input value visually.