no more javascript;dbpass is no more shown as plain text in blog settings