<!DOCTYPE html>
<!-- Copyright 2023 The Chromium Authors
Use of this source code is governed by a BSD-style license that can be
found in the LICENSE file. -->
<html>
<body>
<!-- The action URL of this form is given as the query string in the page's URL,
e.g.: http://127.0.0.1:port/insecure_form.html?http://target_url
-->
<form method=POST action="">
<input type="text" name="username" id="username" value="testuser"><br>
<input type="password" name="password" id="password" value="testpassword"><br>
<input type="submit" value="submit" id="submit">
</form>
<script>
window.onload = function() {
// Extract the form's action URL from the query string.
document.forms[0].action = window.location.search.substring(1);
document.body.appendChild(document.createTextNode("Insecure form ready to submit"));
}
</script>
</body>
</html>