When HandlingTypeChanges from/to Text to Password re-use input state and set or unset the NS_MAYBE_MASKED flag.

TusharSariya · moz-wptsync-bot · commit 9c52c98cd4e1 · 2026-03-07T10:41:13.000Z
Co-authored-by: Emilio Cobos Álvarez <emilio@crisal.io> Differential Revision: https://phabricator.services.mozilla.com/D285372 bugzilla-url: https://bugzilla.mozilla.org/show_bug.cgi?id=928224 gecko-commit: bd0c906ca0a5a1026a6bfeebcd3fda3beb28a4b5 gecko-reviewers: masayuki, layout-reviewers
diff --git a/html/semantics/forms/the-input-element/type-change-in-keypress-listener.html b/html/semantics/forms/the-input-element/type-change-in-keypress-listener.html
@@ -0,0 +1,22 @@
+<!DOCTYPE html>
+<title>Change type attribute inside keypress event handler</title>
+<link rel="help" href="https://bugzilla.mozilla.org/show_bug.cgi?id=928224">
+<script src="/resources/testharness.js"></script>
+<script src="/resources/testharnessreport.js"></script>
+<script src="/resources/testdriver.js"></script>
+<script src="/resources/testdriver-vendor.js"></script>
+
+<body>
+<input id="target" type="text">
+
+<script>
+promise_test(async () => {
+  target.focus();
+  target.addEventListener("keypress", () => {
+    target.type = "password";
+  });
+  await test_driver.send_keys(target, "xyz");
+  assert_equals(target.value, "xyz");
+}, "characters are not dropped when type changes to password during keypress");
+</script>
+</body>
diff --git a/html/semantics/forms/the-input-element/type-change-to-password-ref.html b/html/semantics/forms/the-input-element/type-change-to-password-ref.html
@@ -0,0 +1,7 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<title>value is properly masked if input type changes to password</title>
+
+<p>Test passes if the input element below does not display its value as plain text.</p>
+
+<input type="password" value="abc">
diff --git a/html/semantics/forms/the-input-element/type-change-to-password.html b/html/semantics/forms/the-input-element/type-change-to-password.html
@@ -0,0 +1,13 @@
+<!DOCTYPE html>
+<meta charset="utf-8">
+<link rel="match" href="type-change-to-password-ref.html">
+<title>value is properly masked if input type changes to password</title>
+
+<p>Test passes if the input element below does not display its value as plain text.</p>
+
+<input id="i" type="text" value="abc">
+
+<script>
+i.getBoundingClientRect();
+i.type = 'password';
+</script>
