blob: 800f5221ca60fcb2024b28c129b02c581257c1f2 [file] [log] [blame]
<html>
<head>
<script type="text/javascript">
window.onload = function() {
document.getElementById('to_separate').action = getLocationWithHttpSchemeSecuritySwapped();
}
function getLocationWithHttpSchemeSecuritySwapped() {
var protocol = ("http:" == window.location.protocol) ? "https://" : "http://";
var url = protocol + window.location.host + window.location.pathname;
return url;
}
</script>
</head>
<body>
Navigation complete. Below is the different login form pushed by server but with same action URL.
The URL schem may or may not be same. Moreover, browser shall not promp user to save incorrect password.
<form method="POST" id="to_separate">
<input type="text" id="username_separate" name="username_separate">
<input type="password" id="password_separate" name="password_separate">
<input type="submit" id="submit_separate" name="submit_separate">
</form>
</body>
</html>