1 2 3 4
<!DOCTYPE html> <meta charset=utf-8> <title>invalid value attribute: userinfo-password-bad-chars</title> <input type=url value="http://&a:foo(b]c@d:2/">