html

Three HTML files: html_basic (280 bytes), html_form (413 bytes) with a small form, and html_unicode (313 bytes) with non-Latin characters. HTML is the riskiest of the web files, since a page uploaded by a user and served from your own domain can run scripts in the context of your site. Use these to test that your uploads are either blocked or served from a separate domain with a download header, that the form file, which has a name field and a file input, posts only back to its own page, and that the Unicode page keeps its characters, which tests whether charset is declared and sent correctly.