#!/usr/bin/perl -wT
use strict;
use CGI;

my $cgi = new CGI;
my $action = $cgi->param('q');
if ($cgi->param('add-token')) {
    $action = $action . "&tok=12345678";
}

print "X-XSS-Protection: 1\n";
print "Content-Type: text/html; charset=UTF-8\n\n";

print "<!DOCTYPE html>\n";
print "<html>\n";
print "<body>\n";
print "<p>This is an iframe with a injected form</p>\n";
print "<form method=\"post\" id=\"login\" action=\"".$action."\"></form>\n";
print "<script>if (window.testRunner) testRunner.notifyDone();</script>\n";
print "</body>\n";
print "</html>\n";