title: Does html form submit to self cause any security issues?
body: <p>I tried to look through SO for similar question but I couldn't find one, also searched through the web with my best effort, sorry if it's a silly/duplicate question</p>
  <p>The focus of my question is :</p>
  <p><strong>If I have a form with a unencoded password in it, is it &quot;safe&quot; to pass the form back to [self] i.e. <code>&lt;form action=&quot;&quot;&gt;</code></strong></p>
  <p>EDIT: I would like to focus on security regarding <strong>third parties</strong>, assuming the user himself is NOT the hacker.</p>
  <p>I this is a broad question, so I would like to narrow it down to:</p>
  <ol>
  <li><p>does server handle submit form to self as a internal-forward thing or do it actually treat is as a normal server-to-server http call?</p>
  </li>
  <li><p>Is it possible to somehow intercept the form submit and extract the password from this action? (including things like tapping the connect between server and client??)</p>
  </li>
  </ol>
  <p>If anyone knows any potential security problem in general for [submit to self], feel free to leave it as answer so that future SO user might benefit from it, thanks.</p>