1 2 3 4
<!DOCTYPE html> <meta charset=utf-8> <title>invalid formaction: host-invalid-unicode-percent-encoded</title> <input type=submit formaction="http://%ef%b7%90zyx.com">