Forum Discussion

jonathancrow's avatar
jonathancrow
Advisor
12 years ago

Passing parameters to an iFrame

Ok more than a little pleased with myself, since I am not a coder it was pretty cool when I saw this work.   The problem I had was that I had a form (using Eloqua but could be any form) posted in a...
Views
Sign in to react to this post
PaoloT's avatar
PaoloT
Lithium Alumni (Retired)
12 years ago

Hi jonathancrow 

 

I would be careful with this approach - I think you may want to do a bit more validation on the value of the "params" variable to prevent possible XSS attacks to your pages. 

 

If you know what kind of values your are expecting for the pre-filling then it should be possible to validate the parameters and discard them if they look suspicious.

 

Hope that helps!

Sign in to react to this post