blob: 5620110415ce9ddc6b51604a01e4886a91013c73 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
|
<html>
<head>
<title>CSP Base-URI Violation Test </title>
<base href="https://evil.com/">
</head>
<body>
<form action="evil.com" >
<input type="text" value="test" name="test" />
<button type="submit">Submit Button</button>
</form>
</body>
<script>
"use strict";
document.querySelector("form").submit();
</script>
</html>
|