{#- The button at the end of a password box shows what is typed in it, and
    hides it again. As the form is sent the box hides it once more, so the
    browser still treats it as a password and offers to keep it. -#}
<script>
  document.addEventListener("click", (event) => {
    const button = event.target.closest("[data-shows-password]");
    if (!button) return;
    const input = document.getElementById(button.getAttribute("aria-controls"));
    const shown = input.type === "password";
    input.type = shown ? "text" : "password";
    button.setAttribute("aria-pressed", String(shown));
  });
  document.addEventListener("submit", (event) => {
    event.target.querySelectorAll("[data-shows-password][aria-pressed=true]").forEach((button) => {
      document.getElementById(button.getAttribute("aria-controls")).type = "password";
      button.setAttribute("aria-pressed", "false");
    });
  }, true);
</script>