We’re rewarding the question askers & reputations are being recalculated! Read more.
2 replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
source | link

The browser IE uses its own security feature to prevent the XSS. The XSS Filter, a feature new to Internet Explorer 8, detects JavaScript in URL and HTTP POST requests. If JavaScript is detected, the XSS Filter searches evidence of reflection, information that would be returned to the attacking Web site if the attacking request were submitted unchanged. If reflection is detected, the XSS Filter sanitizes the original request so that the additional JavaScript cannot be executed.

The answer to your question is the URL you are trying to perform the XSS attack, it can be exploitable as the server responds with the same payload as requested in the vulnerable parameter.

please go through http://security.stackexchange.com/questions/47489/utf-7-xss-attacks-in-modern-browsers/47533#47533UTF-7 XSS attacks in modern browsers

The browser IE uses its own security feature to prevent the XSS. The XSS Filter, a feature new to Internet Explorer 8, detects JavaScript in URL and HTTP POST requests. If JavaScript is detected, the XSS Filter searches evidence of reflection, information that would be returned to the attacking Web site if the attacking request were submitted unchanged. If reflection is detected, the XSS Filter sanitizes the original request so that the additional JavaScript cannot be executed.

The answer to your question is the URL you are trying to perform the XSS attack, it can be exploitable as the server responds with the same payload as requested in the vulnerable parameter.

please go through http://security.stackexchange.com/questions/47489/utf-7-xss-attacks-in-modern-browsers/47533#47533

The browser IE uses its own security feature to prevent the XSS. The XSS Filter, a feature new to Internet Explorer 8, detects JavaScript in URL and HTTP POST requests. If JavaScript is detected, the XSS Filter searches evidence of reflection, information that would be returned to the attacking Web site if the attacking request were submitted unchanged. If reflection is detected, the XSS Filter sanitizes the original request so that the additional JavaScript cannot be executed.

The answer to your question is the URL you are trying to perform the XSS attack, it can be exploitable as the server responds with the same payload as requested in the vulnerable parameter.

please go through UTF-7 XSS attacks in modern browsers

1
source | link

The browser IE uses its own security feature to prevent the XSS. The XSS Filter, a feature new to Internet Explorer 8, detects JavaScript in URL and HTTP POST requests. If JavaScript is detected, the XSS Filter searches evidence of reflection, information that would be returned to the attacking Web site if the attacking request were submitted unchanged. If reflection is detected, the XSS Filter sanitizes the original request so that the additional JavaScript cannot be executed.

The answer to your question is the URL you are trying to perform the XSS attack, it can be exploitable as the server responds with the same payload as requested in the vulnerable parameter.

please go through http://security.stackexchange.com/questions/47489/utf-7-xss-attacks-in-modern-browsers/47533#47533