var userControlled=substring of URL; window.location="/abc/xyz?param="+userControlled;
URL is something like
http://mydomain/param1=qwerty where I can enter any value for param1 and system would not complain
Note: Value of param1 does not directly appear anywhere in the response but it is used using DOM
or can be
I was just wondering is there a way to redirect user to a different domain or execute a script or anything which can help me execute a successful XSS attack. Or any other attack for that matter.