Like it needs the user to start typing first then he chooses a value from the auto fill drop menu ... Why can't we auto fill and submit the values when the page just load ?

Cheers - DigiP

Please see arrju's jsfiddle here.

Credit card numbers are just as vulnerable as any.

See here.

This posts the following:

"form": {
    "cardholder": "Fake Card", 
    "cc_cvv": "", 
    "cc_month": "11", 
    "cc_number": "123456789012345", 
    "cc_year": "2017"
  }, 

I guess that was to be expected, but I certainly think this should be included with the demo.

This problem has been known for many years: https://yoast.com/autocomplete-security/. You might want to acknowledge that this is nothing new, and link to that blog post.

This is just a FYI issue to notify that you were added to the curated awesome-humane-tech in the 'Awareness' category, and - if you like that - are now entitled to wear our badge:

By adding this to the README:

[![Awesome Humane Tech](https://raw.githubusercontent.com/humanetech-community/awesome-humane-tech/main/humane-tech-badge.svg?sanitize=true)](https://github.com/humanetech-community/awesome-humane-tech)

https://github.com/humanetech-community/awesome-humane-tech

Hey, great demonstration.

It would be better if you can add some browser-specific details.

This is a simple demonstration of form fields hidden from the user, but will be filled anyways when using the browser form autofill feature, which poses a security risk for users, unaware of giving their information to the website.

In Safari, it will tell you what fields it will fill, you can also customise that. In Chrome that's not the case.

Still triggers in Chrome Version 68.0.3440.106 (Official Build) (64-bit) on Linux.