<!doctype html> <html> <head> <meta http-equiv="Content-type" content="text/html;charset=UTF-8"> <!-- Any copyright is dedicated to the Public Domain. http://creativecommons.org/publicdomain/zero/1.0/ --> </head> <body> <h1>iframe 2</h1> <p>This frame contains a password field inside a form with insecure action.</p> <form action="http://test"> <input type="password" name="pwd"> </form> </body> </html>