ID #4 (Previous | Next)

POST request to: node/add/page

Ending URL: http://www.candidity.co.uk/drupal/tb_sirate/node/add/page

Fields: `<?php array (
'title' => '<script>alert("xss")</script>vJXi1Hrf',
'changed' => '',
'form_build_id' => 'form-YGiSPnrK_VXAZpAy1HsyCxkcKkUVO-boFmpwbcAsHbY',
'form_token' => 'Jbx9ZysoTn1z0SPBnSFGaw33i0VPamj0Th-MEC-RHI0',
'form_id' => 'page_node_form',
'body[und][0][summary]' => '',
'body[und][0][value]' => '',
'body[und][0][format]' => 'filtered_html',
'additional_settings__active_tab' => '',
'op' => 'Preview',
)`

Skip to main content

## Status message

The trimmed version of your post shows what your post looks like when promoted to the main page or when exported for syndication. You can insert the delimiter "<!--break-->" (without the quotes) to fine-tune where your post gets split.

# Preview

### Preview trimmed version

## <script>alert("xss")</script>vJXi1Hrf

- Read more about alert("xss")vJXi1Hrf

### Preview full version

## <script>alert("xss")</script>vJXi1Hrf

Title *
Summary
Leave blank to use trimmed value of full text as the summary.
Body

More information about text formats

Text format

### Filtered HTML

- Web page addresses and e-mail addresses turn into links automatically.
- Allowed HTML tags: <a> <em> <strong> <cite> <blockquote> <code> <ul> <ol> <li> <dl> <dt> <dd>
- Lines and paragraphs break automatically.

### Plain text

- No HTML tags allowed.
- Web page addresses and e-mail addresses turn into links automatically.
- Lines and paragraphs break automatically.

## Vertical Tabs