@craigmaloney

What I've noticed lately is that Firefox won't fill in the password until I click on something -- specifically, it shows my username in a drop-down, and only fills in the password if I select it.

But still... wow, that's a pretty major exploit. o.0

(...and what's to stop the javascript from "selecting" it for me?)

cc: @bstacey