<form action="" method="post"> <input name="username" value="admin" /> <input name="password" type="password" value="secret" /> <input name="injected" value="injected" dirname="password" /> <input onmouseover=prompt(document.domain) type="submit"> </form>
Tesy