Insecure Form Warning

WHAT IT DOES

Insecure Form Warning scans the current page for forms with password fields and checks if the form action URL uses HTTP (insecure) or if the page itself is loaded over HTTP, displaying a prominent warning banner and highlighting insecure forms with visual indicators. The tool helps protect you from submitting sensitive information over insecure connections where data could be intercepted.

WHERE IT RUNS

This tool works on any webpage that contains forms, especially login pages, registration forms, password reset pages, and any other form that collects password or sensitive information. It detects password fields and analyzes the security of both the page and the form submission endpoint. It runs on all websites as designated in its match patterns.

HOW TO USE

After installing the BotGentz extension, the tool automatically scans the page for forms with password fields. Configure your settings in the panel: toggle the warning banner display, highlight insecure forms, set auto-dismiss time for the banner, enable sound alerts, and log warnings. The panel displays the current status showing how many insecure forms were detected. When an insecure form is found, a red warning banner appears at the top of the page, and the insecure form is highlighted with a red border and warning text. Use "Scan Now" to manually rescan the page, and "Clear Log" to reset the warning log.

TECHNICAL SECTION — FORM SECURITY ANALYSIS

The tool scans the DOM for all form elements using document.querySelectorAll, then checks each form for password input fields. For each form with a password field, it analyzes the security context: the page protocol (HTTP vs HTTPS), the form's action URL (whether it uses HTTP, HTTPS, or is relative), and whether the action is absolute or relative. The tool identifies insecure patterns including: pages loaded over HTTP, form actions that explicitly use HTTP, and relative actions on pages that may be insecure. When insecure forms are detected, the tool creates a visual warning banner and adds highlighted indicators directly on the page. The tool also logs warnings for later review when logging is enabled.

THE PANEL

The panel is draggable anywhere on the screen and remembers its position per site. It can snap to the left, right, top, or bottom edges, or float freely. Collapse it to a small status indicator when you need more page visibility, and expand it again with a single click. Resize it vertically or horizontally to see more settings. Press Escape to close the panel instantly. All settings (show banner, highlight forms, auto-dismiss, sound alerts, log warnings) are saved globally and persist across sessions.

PLEASE NOTE

This tool requires the free BotGentz extension. It scans forms and provides warnings but does not prevent form submission—you remain responsible for your security decisions. The tool may not detect all insecure form configurations, especially those using JavaScript-based submission. It is a visual aid and not a substitute for proper security practices. Websites change their layouts frequently; scripts may need updates, and we work to keep them current but cannot guarantee uninterrupted operation.