8 lines
904 B
HTML
8 lines
904 B
HTML
<!doctype html><html><meta charset="UTF-8"><title>Static security fixture</title>
|
|
<meta http-equiv="refresh" content="1;url=next.html"><style>@import url('http://127.0.0.1:18765/style.css');@font-face{font-family:blocked;src:url('http://127.0.0.1:18765/font.woff')}</style>
|
|
<h1>Static security fixture</h1><p id="script-marker">SCRIPT DID NOT RUN</p>
|
|
<script>document.getElementById('script-marker').textContent='SCRIPT EXECUTED';fetch('http://127.0.0.1:18765/script');</script>
|
|
<img src="http://127.0.0.1:18765/image"><iframe src="file:///etc/passwd"></iframe><iframe src="http://127.0.0.1:18765/frame"></iframe>
|
|
<form action="http://127.0.0.1:18765/form"><input value="READ ONLY"><button>Submit</button></form>
|
|
<a href="file:///etc/passwd">Blocked file</a><a href="doc://different-session/index.html">Blocked other session</a>
|
|
<a href="http://127.0.0.1:18765/external">Explicit external link</a></html> |