This is a simple test app for testing the "autospill" security issue. It renders a host app and webview, both with password fields. A correctly behaving app should in all cases only fill in the selected username and password field, not the other.