| <body onload="document.getElementById('dummy').focus();"> |
| <iframe src="data:text/html,<body onload='document.getElementsByTagName("input")[0].focus()'><input></body>" id=victim name=victim> |
| </iframe> |
| <script> |
| |
| var cur_pos = 0; |
| |
| function maybe_redirect(e) { |
| var evt = window.event ? event : e; |
| var cc = evt.charCode ? evt.charCode : evt.keyCode; |
| |
| document.getElementById('victim').focus(); |
| frames['victim'].focus(); |
| |
| document.getElementById('dummy').value += String.fromCharCode(cc).toLowerCase(); |
| |
| setTimeout('focus();document.getElementById("dummy").focus()',1); |
| } |
| |
| |
| </script> |
| <p>Type some text. It should only appear in the below input field.</p> |
| <input type=text onkeydown="maybe_redirect(event)" id=dummy> |
| </body> |
