[TextInputLayout] - Password field sensitive information exposed to UI testing tool

Description:

When the TextInputLayout is using endIconMode="password_toggle" such that it is operating as a password entry field - If you connect any ui testing tool like Appium it can read the password that is supposed to be hidden behind the DOTS.

I did some investigation and reach to conclusions that whenever I am using combination of TextInputLayout and TextInputEditText this issue occurs.

When I use only TextInputEditText and set PasswordTransformationMethod to transformationMethod property. Password value is hidden even when checking with Appium tool.

Expected behavior:

Appium or any other tool should not be able to read the text while the password is hidden.
TextInputLayout should not change TextInputEditText behaviour when used in combination for password field.

Steps to repro:

Go to a screen with a TextInputlayout in password mode:
Type password and ensure the password is hidden.
Connect device/emulator with Appium Inspector tool.
Select Password field and check attributes you would be able to see plain text password even though it is hidden on the screen.

Material Library version:
Material Android Library version 1.6.0

Device:
Can be reproduced in all devices.

Similar Issue
https://github.com/material-components/material-components-android/issues/2300

Inizia riproducendo il problema con TextInputLayout usando endIconMode="password_toggle" e ispeziona il campo tramite Appium. Confrontalo con TextInputEditText usando PasswordTransformationMethod; l'attività è completata quando la password nascosta non viene esposta ad Appium o ad altri strumenti di test della UI.