GitLab

A website may have an <input type="password"> that is dynamically changed to an
<input type="text"> when the user clicks on an eye icon to reveal the password.

This means that the text input field now has the user's password which is
susceptible to learning for autofill and the Android keyboard.

We should track the past state of input field and prevent learning if a field
has ever been a password field.

Bug: 794949
Change-Id: I14023dbf9f2e2449bc5155b4432cdb73c7bcc223
Reviewed-on: https://chromium-review.googlesource.com/827075Reviewed-by: Jochen Eisinger <jochen@chromium.org>
Reviewed-by: Keishi Hattori <keishi@chromium.org>
Reviewed-by: Changwan Ryu <changwan@chromium.org>
Commit-Queue: Dominic Battré <battre@chromium.org>
Cr-Commit-Position: refs/heads/master@{#524684}