Once again reviewers commenting on something that its not. Waste of my time

Added description and test instructions

A nice feature and usability improvement.

@bembelimen is right here. If there are several password fields on the screen, the message appears only on one place.

When I start entering credentials in the loginsite the message appears, butnot on the login module - the message appears.
I suggest the String "Caps Lock is on" (no dot).

I would accept this feature (even if I think is a security issue and would it make it globaly configureable). what does speak against doing it like apple in macos?

Not making it configurable and refuse to be responsible for anyone saying I introduced a security issue so will just use this for myself and not share it. Seems that most people do that anyway.

even if I think is a security issue

This IS NOT a security issue!!!

What IS a huge security issue is the fact that Joomla after all these years is not yet CSP Strict and has a big number of known XSS.

you opinion doesn't need to be my opinion, I only see a reduction of possible characters by 20-50%. Anyway many system do it so it's like not so bad. As long as I can disable it for my sites I have no problem with it.

I would like csp strict and I also want to get fixed all xss issues joomla.

I only see a reduction of possible characters by 20-50%. 

How???

if someone looks over your shoulder while you are typing he or she can see the capslock, I know that's maybe an odd scenario (shoulder and capslock-hiding trick) but I'm uncomfortable giving any information (without asking for it, I mean the show passwort button in this case) to an attacker. I also know that many people think different, that's the reason that I would merge it but wouldn't like to use it on my sites.

you opinion doesn't need to be my opinion,

I'm not trying to dictate my opinion rather trying to set the stage correctly: A client side indicator (not sharing state with the server) could NEVER be a security concern. It's just a decorative/informative that is only available to a particular user (it's UI/UX enhancement if you want)

I only see a reduction of possible characters by 20-50%

That's not correct, the code is only indicating the state of caps lock, not preventing the use of caps lock. Also as it was coded it's completely inaccessible as the message should be on an aria-live so visually impaired users could also be informed.

I would like csp strict and I also want to get fixed all xss issues joomla.

That won't happen anytime soon, unless the project is wiling to accept the B/C breaks required

So you also ban users from using a Mac on your sites?

So you also ban users from using a Mac on your sites?

sorry that I explained my concerns for this feature to you not more not less

@dgrammatiko it is accessible for screen readers as already explained. Fyi you cannot add aria live to the dom

@HLeithner you can't say it's not secure without justifying your statement

And then I get your comment, which is completely unrelated. The one thing is a user decision and the other thing is my decision as site creator. When the user like to have a mac with this feature so be it, why should I hold him or her back? It's a complete different level.

Of course it's related as it's a default behaviour on safari

still the decision of the user to have it not mine on my sites.

Fyi you cannot add aria live to the dom

Of course you can: Wrap any text with an <output> element and enjoy (aria-live is implicit for that element)