I found a website in which the results are rendered on the next page. From "/search" address, the data is forwarded to "/result" without any trailing characters(searched item) on the address. But the html code from the first page is rendered on the next page, and yes javascript execution can be executed. Is this still a security risk even though the searched string is not on the address url?

  • Not 100% sure what you're asking, but if "yes javascript execution can be executed" means entering something like <script>alert("hi")</script> in the text-box triggers a pop-up, then it's unsafe. What matters is how user-supplied data is (or is not) sanitized, not how the user-entered data gets from one place to another. – TripeHound Mar 12 '20 at 15:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.