Value property for password HTML server control

[Neil Zanella]

Hello,

Normally default values for passwords are left unspecified. However, the
XHTML standard allows them for all I know, so I decided to try coding the
following ASP.NET HTML server control on the page I am writing for testing:

<input id="password" type="password" value="foo" runat="server" />

Much to my surprise, when the input element has the runat attribute as
described above, it seems like the ASP.NET Web Matrix server (or should
I say the ASP.NET application framework?) strips away the value field
from the HTML output.

Why is the value attribute being stripped off in the
output sent to the web browser?

Thanks,

Neil

 

[Guest]

Hi,

I think it is a property of ASP.NET to strip off the values of password
field. When you type password in any form and the form is sent back to
browser and returns again, all the fields will be the same, but the password
field is stripped off.

Prakash.C

 

[Scott Allen]

It's a security feature to avoid putting a password in plain text where someone
could snoop it by viewing the html source...