Originally Posted by glenngv
After loading the page and typing something in the field, quickly verify that the hidden input's value changed by
typing this in the browser's address bar and hitting Enter key
It should alert the value entered in the 'name' field.
I didn't know that js can be used this way,
I use ffox 3 with noscript installed and when I try this ends with a xss alert. Seems normal but is some way to avoid this?
maybe what I type was wrong,