javascript - XSS attack from url get variable -


I have a site to get data from a database and create a link for the next page

link page Page_id and this URL bar

   

The URL will be displayed:

  example.php Page = 2 & title = foo  

Page_ID will be only numbers but the title can be anything.

My questions are: < / P>

  • If the user in the javascript: alert () heading?
  • Will it run the script from the URL?
  • Anything should be taken care of?

Do not do the browser Security should not (at least IE 11) onclick should not execute JavaScript feature.


Comments