I thought the password type fields were unreadable by JS. Only the server could get the value of a password when the form was submitted.
They’re not unreadable! JavaScript can read them (on Chrome you have to interact with the page first, and on Firefox they can be read as soon as the page loads)
wut? most websites nowadays have “show password” icon, all JS :)