| CONSOLE MESSAGE: line 5: The XSS Auditor refused to execute a script in 'http://localhost:8000/security/xssAuditor/intercept/echo-form-action.pl/%22%20onmouseover=%22JavaScript:alert(document.domain)%22%20name=%22?m=login' because its source code was found within the request. The auditor was enabled because the server did not send an 'X-XSS-Protection' header. | |
| -------- | |
| Frame: '<!--frame1-->' | |
| -------- | |
| This is an iframe with a injected form | |