From cebab3251412d3ba5b83b2294696c14471e4af09 Mon Sep 17 00:00:00 2001
From: James Read <contact@jread.com>
Date: Sat, 31 May 2025 20:54:44 +0100
Subject: [PATCH] bug: Hide password values in deeplinks #594 (#596)

---
 webui.dev/js/ArgumentForm.js | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/webui.dev/js/ArgumentForm.js b/webui.dev/js/ArgumentForm.js
index 21d74f4..6b5470a 100644
--- a/webui.dev/js/ArgumentForm.js
+++ b/webui.dev/js/ArgumentForm.js
@@ -221,9 +221,13 @@ class ArgumentForm extends window.HTMLElement {
     if (!ev.target.name) {
       return
     }
-    // Get the current URL and create a new URL object
+
     const url = new URL(window.location.href)
 
+    if (ev.target.type === 'password') {
+      return;
+    }
+
     // copy the parameter value
     url.searchParams.set(ev.target.name, ev.target.value)