[anaran]

Encryption password entry in the clear in a dialog!

That should at least be <input type="password">

[davidcollantes]

I think it is on purpose, as you are only asked to type it once. Type the wrong thing, and no way to decrypt the file.