His suggested fix will break work for sites that use AJAX on the login forms.
It is however an interesting vector as it will steal the password without any user interaction or knowledge.
It is however an interesting vector as it will steal the password without any user interaction or knowledge.