3 ms·

Yep. Even though it posts to https://127.0.0.1 https://127.0.0.1 since the page itself isn't https it could have scripts injected into it over the wire.

• nikisweeting 9y ago
  Despite having 127.0.0.1 in the action field, the form does not actually submit, you can verify with the dev tools.
  • hunter2_ 9y ago
    If scripts were injected into it, how do you know the form would not submit?
    • kayfox 9y ago
      The problem was corrected. Its not the site owners fault Equifax cant link to the correct site.