pdudits / firefox-supergenpass Goto Github PK

Typing your SGP master password in to a password field and then invoking SGP seems like a recipe for accidentally exposing your master password.

1. Enter password in to field
2. Right click and attempt to invoke SGP but miss-click
3. Context menu goes away
4. You submit your master password accidentally

This is doubly worrisome if your master password is ten digits because there is no visual indicator that the field has been SGPified. At minimum the add-on should indicate in the UI that a password has been SGPd. The applet does this by changing the CSS background-color to green.

Ideally this addon would popup a separate input box prompting for your password and then would populate all the password fields on the page (this is how the SGP applet works).

The documentation mentions that the shortcut key on Windows is SHIFT + F10, but declines to mention what the key combo on other OSes is. What is the key?