Password are visible in tooltips of `LineEdit` with `secret` enabled

[AdriaandeJongh]

Tested versions

4.4.1

System information

Godot v4.4.1.stable - macOS Sequoia (15.6.1) - Multi-window, 2 monitors - Metal (Mobile) - integrated Apple M3 Max (Apple9) - Apple M3 Max (14 threads)

Issue description

When hovering over password fields in the editor, the actual contents of the password are just there! This feels like an oversight? This has potential security issues, eg. someone runs over the the computer and hovers over password fields or something...

Steps to reproduce

Type some characters in any export preset password field and hover over it :)

Minimal reproduction project (MRP)

n/a

[bruvzg]

The tooltip in EditorPropertyText is set to value unconditionally, so it's probably an oversight.

[Calinou]

This has potential security issues, eg. someone runs over the the computer and hovers over password fields or something...

Note that in any case, external programs that hook into the program's memory could be used to read passwords. Ensuring the values don't appear in tooltips will be safer if bypassers aren't able to use such programs, but if they are, there's nothing you can really do to hide the values.

[bruvzg]

These settings are stored in plain text, so external programs can read a file directly. But tooltip can accidentally reveal it on a screenshot or video stream/recording.