Don't send form data that is marked autocomplete off to the browser....

webkit/glue/form_field_values.cc

 // Copyright (c) 2009 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "base/basictypes.h"
 #include "base/logging.h"
 #include "base/string16.h"
 #include "third_party/WebKit/WebKit/chromium/public/WebFrame.h"
 #include "third_party/WebKit/WebKit/chromium/public/WebFormElement.h"
 #include "third_party/WebKit/WebKit/chromium/public/WebInputElement.h"
@@ skipping 25 matching lines @@
   return result;
 }
 
 void FormFieldValues::ExtractFormFieldValues(const WebFormElement& form) {
   WebVector<WebInputElement> input_elements;
   form.getInputElements(input_elements);
 
   for (size_t i = 0; i < input_elements.size(); i++) {
     const WebInputElement& input_element = input_elements[i];
     if (input_element.isEnabledFormControl()) {
-      // TODO(jhawkins): Remove this check when we have labels.
-      if (!input_element.nameForAutofill().isEmpty())
+      // TODO(jhawkins): Remove the check nameForAutofill().isEmpty() when we
+      //                 have labels.
+      if (input_element.autoComplete() &&
+          input_element.inputType() != WebInputElement::Password &&
+          !input_element.nameForAutofill().isEmpty()) {
         elements.push_back(FormField(input_element));
+      }
     }
   }
 }
 
 }  // namespace webkit_glue