@unotest/web 0.43.0 → 0.43.1

package/dist/inspection/page-inject.js

@@ -2418,11 +2418,19 @@ function pickerOverlayAlgorithm(op) {
       ...extra.key !== void 0 ? { key: extra.key } : {}
     });
   }, "push");
+  const SECRET_AUTOCOMPLETE = ["current-password", "new-password", "one-time-code"];
+  const isSecretField = /* @__PURE__ */ __name((el) => {
+    if ((el.getAttribute("type") ?? "").trim().toLowerCase() === "password") return true;
+    const tokens = (el.getAttribute("autocomplete") ?? "").toLowerCase().split(/\s+/);
+    return tokens.some((token) => SECRET_AUTOCOMPLETE.includes(token));
+  }, "isSecretField");
+  const hiddenValue = /* @__PURE__ */ __name((value) => `\u2039hidden, ${value.length} chars\u203A`, "hiddenValue");
   const commitFill = /* @__PURE__ */ __name(() => {
     const node = state.pendingFill;
     state.pendingFill = null;
     if (!node) return;
-    const value = node.value ?? "";
+    const typed = node.value ?? "";
+    const value = isSecretField(node) ? hiddenValue(typed) : typed;
     push(node, "fill", { placement: "append", value });
   }, "commitFill");
   const describe = /* @__PURE__ */ __name((node) => {
@@ -2596,6 +2604,21 @@ function serializeRuntimeDom() {
     return tag === "input" && (name === "value" || name === "checked");
   }
   __name(isLiveControlledAttr, "isLiveControlledAttr");
+  const SECRET_AUTOCOMPLETE = ["current-password", "new-password", "one-time-code"];
+  function isSecretField(el) {
+    if ((el.getAttribute("type") ?? "").trim().toLowerCase() === "password") return true;
+    const tokens = (el.getAttribute("autocomplete") ?? "").toLowerCase().split(/\s+/);
+    return tokens.some((token) => SECRET_AUTOCOMPLETE.includes(token));
+  }
+  __name(isSecretField, "isSecretField");
+  function hiddenValue(value) {
+    return `\u2039hidden, ${value.length} chars\u203A`;
+  }
+  __name(hiddenValue, "hiddenValue");
+  function shownValue(el, value) {
+    return isSecretField(el) ? hiddenValue(value) : value;
+  }
+  __name(shownValue, "shownValue");
   function runtimeAttrs(el) {
     const tag = el.tagName.toLowerCase();
     if (tag !== "input") return "";
@@ -2604,7 +2627,7 @@ function serializeRuntimeDom() {
     if (type === "checkbox" || type === "radio") {
       return inp.checked ? " checked" : "";
     }
-    return ` value="${escAttr(inp.value)}"`;
+    return ` value="${escAttr(shownValue(el, inp.value))}"`;
   }
   __name(runtimeAttrs, "runtimeAttrs");
   function serialize(node) {
@@ -2624,6 +2647,7 @@ function serializeRuntimeDom() {
       attrs += ` ${attr.name}="${escAttr(attr.value)}"`;
     }
     attrs += runtimeAttrs(el);
+    if (tag === "noscript") return `<${tag}${attrs}></${tag}>`;
     let html = `<${tag}${attrs}>`;
     if (VOID.has(tag)) return html;
     const sr = el.shadowRoot;
@@ -2633,7 +2657,7 @@ function serializeRuntimeDom() {
       html += `</template>`;
     }
     if (tag === "textarea") {
-      html += escText(el.value);
+      html += escText(shownValue(el, el.value));
     } else {
       for (const c of Array.from(el.childNodes)) html += serialize(c);
     }