title: Don't permit to display saved password on eyeIcon in JavaScript
body: <p>In my rails app I've got registration form where user can show his password when click on an eye icon.</p>
  
  <p>The thing is that I don't want to permit to display saved password in an edit page (saved password from the browser's keychain) if it hasn't been directly typed or at all. Is it possible to disable this in such case?</p>
  
  <pre><code>eyeIcon.click(function(evt) {
    var eye = $(this),
        field = eye.closest(":has(div)").find('.vr-textfield'),
        isInTextMode = field.attr('type') == 'text';
  
    // update field and icon view
  
    if (!isInTextMode) {
      field.attr('type', 'text');
      eye.attr('src', eyeIconSrc.active);
    }
    else {
      field.attr('type', 'password');
      eye.attr('src', eyeIconSrc.inactive);
    }
  });
  </code></pre>
  
  <p><strong>Edit</strong></p>
  
  <p>To be more clarify: the user (or their worst enemy) can freely recover a previously saved password from the browser's keychain and then clicking on the eye button, they can see the plain password, exposing a vulnerability, especially if they use the same password for everything - please take a look <a href="https://monosnap.com/file/Kdc9XO9ZRWtDVg83XzE6gPpQgOjWTR" rel="nofollow noreferrer">here</a></p>
  
  <p>I want to allow user to show his password using <code>eyeIcon</code> only when it's typed directly from the browser, and don't permit when it's provided as on the link above.</p>