Using the proxy login for HTML5 access all parameters are send within the URL, also user name and password. The form is using the GET methode, should be changed to POST. In the log / history of the used browser you can get the complete URL with user name and password.
