<html>
    <head>
        <title>User Defined JS Injection Test</title>        
    </head>
    <body>
        
<form id="j_id_id16" name="j_id_id16" method="post" action="/jsf-systest/faces/regression/InjectUserDefJS.jsp" enctype="application/x-www-form-urlencoded">
<input type="hidden" name="j_id_id16" value="j_id_id16" />
<input type="hidden" name="javax.faces.ViewState" id="javax.faces.ViewState" value="j_id5:j_id6" />

<script type="text/javascript" language="Javascript">
<!--
function dpf(f) {var adp = f.adp;if (adp != null) {for (var i = 0;i < adp.length;i++) {f.removeChild(adp[i]);}}};function apf(f, pvp) {var adp = new Array();f.adp = adp;var i = 0;for (k in pvp) {var p = document.createElement("input");p.type = "hidden";p.name = k;p.value = pvp[k];f.appendChild(p);adp[i++] = p;}};function jsfcljs(f, pvp, t) {apf(f, pvp);var ft = f.target;if (t) {f.target = t;}f.submit();f.target = ft;dpf(f);};
//-->
</script>
<a href="#" onclick="var a=function(){alert('Are you sure?');};var b=function(){if(typeof jsfcljs == 'function'){jsfcljs(document.getElementById('j_id_id16'),{'j_id_id16:j_id_id18':'j_id_id16:j_id_id18'},'');}return false};return (a()==false) ? false : b();">Link</a><input type="submit" name="j_id_id16:j_id_id20" value="Button" onclick="alert('Are you sure?')" />
</form>
    </body>
</html>
