Hacker News new | ask | show | jobs
by londons_explore 623 days ago
I almost guarantee this is some logging system configured to "just log every request" or "just keep the innerHTML of the whole page whenever an error occurs for debugging" or similar, which picked up password fields too.

Super easy mistake to make.