Query parameter added to HTTP as javascript function

Question

I see there're some periodical requests with script in the query parameter when I'm looking at my google analytics, something looks like this

/about?RaNDMPRMz='-function(){debugger}()-">\"><scrIpt>debugger</scrIpt><aUdio src=x oNerror=debugger><"-'-function(){debugger}()

It appears almost through out all available pages, like /home/, /events/.. What does this kind of query mean and should I worry about it?

GwynBleidD · Accepted Answer · 2015-09-22 12:50:41Z

1

Someone is apparently looking for vulnerabilities in your code that will allow him to inject javascript code into your site. Should you worry about it? Only if that someone will find something, but before that you should review your code to find and fix possible vulnerabilities.

answered Sep 22, 2015 at 12:50

GwynBleidD

20.6k5 gold badges51 silver badges80 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

jcjason Over a year ago

I've no idea what to fix and how this injection will work. Is the way that google about XSS attack right direction?

Collectives™ on Stack Overflow

Query parameter added to HTTP as javascript function

1 Answer 1

1 Comment

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

1 Comment

Your Answer

Sign up or log in

Post as a guest

Related