I have a website that I am testing but I am pretty new to all of this security stuff and would appreciate some help!.
I have a url similar to the following:
nexturl parameter determines what url should be displayed after something has happened.
I'm trying to test for XSS vulnerabilities and have disabled URL filtering in my browser. I am trying to replace the whatever with something like
<script>alert(1)</script> and if I view the page source code I see "
nextUrl=<script>alert(1)</script>" in it. However, I do not see an alert when the "something has happened".