form-action test

This form has target="_blank" which means that Chrome will allow a POST to paypal.com in breach of CSP. This form does not have a target attribute and Chrome will block the POST to paypal.com in accordance with the CSP. The bug for this can be

Sponsored by: Report URI - XSS can ride a passkey-authenticated session. See it in the browser.

This form has target="_blank" which means that Chrome will allow a POST to paypal.com in breach of CSP.

This form does not have a target attribute and Chrome will block the POST to paypal.com in accordance with the CSP.

Wow! Thanks for the support!

Success! Your billing info is updated.

Billing info update failed.