I have a page on my website like this :
var imgPath = getQuerystring('img'); $("#img").attr('src','/Images/' + imgPath);
I was wondering if someone can manipulate the querystring to do something mailicious.
But then I changed my js code to this:
Now when I passed a malicious querystring like this:
But whoops, it didnt show me the alert box.
Is this kind of attack taken care of by our Web browsers?