1 2 3 4
<!DOCTYPE html> <meta charset=utf-8> <title>invalid formaction: scheme-javascript-no-slash-malformed</title> <input type=submit formaction="javascript:example.com/">