1 2 3 4
<!DOCTYPE html> <meta charset=utf-8> <title>invalid formaction: host-double-percent-encoded-percent-encoded</title> <input type=submit formaction="http://%ef%bc%85%ef%bc%94%ef%bc%91.com">