[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Value of Password Objects



mike_grapevine@4G-GATEWAY.NSWSES.NAVY.MIL wrote: 
>      Is the value property of a password object assessable from
> JavaScript?

No.  Access to the value of password fields was disabled because of 
security concerns about rogue JavaScript code getting password values 
and shipping them off to a server somewhere.  (Remember that the 
JavaScript code wouldn't necessarily have to be on the page in question; 
it could be in another unrelated frame.)  There's a possibility this 
restriction could be loosened in the future given implementation of a 
more comphrehensive security model and corresponding security measures 
in JavaScript.

Frank

-- 
Frank Hecker          Pre-sales tech support, Netscape Federal sales
hecker@netscape.com   http://home.netscape.com/people/hecker/