HTML tags that can clobber the credentials part of the URL

2

2

2

2

<$[data1] id="xx" $[data2]="https://x:x@x.com">

if(xx.username==="x"){log('$[data1]:$[data2]')}