Clear the password input field

If a user disconnects but leaves the browser tab open, the password
input field would still contain the password for future connections.
We now clear the input field after reading the password into memory.

1 files changed, 4 insertions, 1 deletions

diff --git a/app/ui.js b/app/ui.js
index 73ad2b4..0d6a657 100644
--- a/app/ui.js
+++ b/app/ui.js
@@ -1133,7 +1133,10 @@ const UI = {
     },
 
     setPassword: function(e) {
-        var password = document.getElementById('noVNC_password_input').value;
+        var inputElem = document.getElementById('noVNC_password_input');
+        var password = inputElem.value;
+        // Clear the input after reading the password
+        inputElem.value = "";
         UI.rfb.sendPassword(password);
         UI.reconnect_password = password;
         document.getElementById('noVNC_password_dlg')