If you can modify the type of the field, you can also read the field's value without changing the type (e.g. document.getElementById('password').value from the

If you can modify the type of the field, you can also read the field's value without changing the type (e.g. document.getElementById('password').value from the console). Even just using the address bar via javascript:{alert(document.getElementById('password').value);} As Raymond Chen and others call it: "the airtight hatchway problem."[0] Meaning you're sitting in a context where you can steal the password in infinite ways and complaining about the easiest one. But ultimately fixing that one way still leaves infinite remaining ways. You're in the superuser context for the webpage. If you can modify the password field's type you can literally do anything to that page. [0] https://stackoverflow.com/questions/2787853/arent-passwords-written-in-inputbox-vulnerable-through-a-stack-trace https://stackoverflow.com/questions/2787853/arent-passwords-...