Use type="password" for secret

[tizmagik]

This prevents certain browser extensions (e.g. Grammarly) from parsing/reading the secret value pasted into the password field.

[bradrydzewski]

The textarea is important for multi-line secrets, such as ssh keys and jwt tokens, which are quite commonly used. We would need a solution that solves for multi-line input. Any thoughts?

[tboerger]

Maybe a javascript lib that replaces the real value with * including an icon/button that can toggle the output.

[tizmagik]

Ah, hadn’t considered the multi-line character issue, that’s a good point. Do we know for sure that newline characters would be swallowed with a password input type?