3 ms·
Isn't there a race condition, where the password is visible to malicious Javascript, before the submit navigates away from the filled-form page?
by hythloday 14y ago
Isn't there a race condition, where the password is visible to malicious Javascript, before the submit navigates away from the filled-form page?
- deleted 14y ago[deleted]
- plorkyeran 14y agoYes, and I've actually used that to extract my own password that I've forgotten. Opera's implementation coincidentally stops this specific attack, but it's not in any way a security mechanism.