Do you mean the form at admincp/index.php? Disable JavaScript once then the password can be captured.
It is really a security risk. If you disable JavaScript the pasword will also not be transfered hashed. This increases security and this is the reason why the password can't be stored by the browser: it is removed and hashed before it will be submited to the server.
|