| <html> |
| <head> |
| <script type="text/javascript"> |
| window.onload = function() { |
| document.getElementById('to_separate').action = getLocationWithHttpSchemeSecuritySwapped(); |
| } |
| |
| function getLocationWithHttpSchemeSecuritySwapped() { |
| var protocol = ("http:" == window.location.protocol) ? "https://" : "http://"; |
| var url = protocol + window.location.host + window.location.pathname; |
| return url; |
| } |
| </script> |
| </head> |
| <body> |
| Navigation complete. Below is the different login form pushed by server but with same action URL. |
| The URL schem may or may not be same. Moreover, browser shall not promp user to save incorrect password. |
| <form method="POST" id="to_separate"> |
| <input type="text" id="username_separate" name="username_separate"> |
| <input type="password" id="password_separate" name="password_separate"> |
| <input type="submit" id="submit_separate" name="submit_separate"> |
| </form> |
| </body> |
| </html> |