Difference between revisions of "User:Doody/Sandbox"

Revision as of 12:52, 2 December 2012

<% If (Len(Request.QueryString("name")) > 0) Then

    Response.Cookies("name") = Request.QueryString("name") 

End If

Response.Write("Welcome " & Response.Cookies("name") & "!") 'this script is vulnerable to XSS, the input has not been encoded (see below) %>