IE8 XSS filter: what does it really do?
What does it really do? It allows third parties to link to a messed-up version of your site. It kicks in when [a few conditions are met and] it sees a string in the query submission that also exists verbatim in the page, and which it thinks might be dangerous. It assumes that if <script>something()</script> … Read more