Question

I searched on SO and found that:
Is javascripts access to a password fields value considered a security risk?

However, it doesn’t say if using Javascript to do something like compare “password” and “confirm password” adds a security threat to the one already existing?

Thanks a lot if you could clarify this matter. Regards

Answer 1

What would your script do once it confirms that the two passwords are the same? If it sends the password over the wire, you are back to the exact question you linked to.

Even if you do not send the password anywhere the risk od code injection still remains

So, no additional security risk, but is does not remove any either