XSSAuditor should strip formaction attributes from input and button elements.