You want to have a password input in your application, but "displayAsPassword" isn't adequate. Users are able to reveal the password by exploiting the NativeDrag functionality of AIR.
Proposed workaround: Extend TextInput or, for non-Flex applications the TextField class. Add an event listener for the NativeDragEvent.NATIVE_DRAG_START event. In the event handler, clear the clipboard content. Simple!
public class PasswordInput extends TextInput {
public function PasswordInput() {
super();
displayAsPassword = true;
addEventListener(NativeDragEvent.NATIVE_DRAG_START, dragStart);
}
private function dragStart(e:NativeDragEvent):void {
e.clipboard.clearData(ClipboardFormats.TEXT_FORMAT);
}
}
+