1 2 3 4
<!DOCTYPE html> <meta charset=utf-8> <title>invalid src: userinfo-username-contains-at-sign</title> <script src="http://::@c@d:2"></script>