[UncleMeat]

You are already one xss attack away from having your session stolen or having your credentials stolen or any number of other bad things. Passwords on the client are fine.

[anoncake]

Unless the user uses the same password for other things, which is extremely common.