dal" aria-label="Close">
                    <span aria-hidden="true">&times;</span>
                </button>
            </div>
            <div class="modal-body">
                
<p><code>ricardo.action</code> is set to a user controlled input through a GET parameter
<code>ricardo</code> and the form is auto submitted,
ergo a Javascript URI would do it.</p>

<pre class="solution-code-block"><code class="language-js">javascript:alert(1337)</code></pre>

            </div>
            <div class="modal-f