Add HTML attributes to prevent password form from adding the password to query params even when JS has not been loaded

[Greenheart]

Details:

https://stackoverflow.com/questions/18189187/stop-url-parameters-being-added-on-submit-of-form

[Greenheart]

This issue appears when submitting a page that has not fully loaded.

• Either load full bundle before it's possible to enter the password
• and/or show a "loading..." indicator before page is ready
• or handle error to prevent the password from being submitted.

Probably it's better to show a loading indicator before the page is ready.

---

Yes, the solution will definitely be to 1) hide the password input by default, 2) show a loading indicator and 3) show the password input once the bundle is ready to start decrypting.

[Greenheart]

fixed in 4.0.0