diff --git a/demo/index.php b/demo/index.php index 6f84d44b..16e3ae14 100644 --- a/demo/index.php +++ b/demo/index.php @@ -6,6 +6,11 @@ function get($name, $default = '') { + if($name == 'url') { + if(filter_var($_GET['url'], FILTER_VALIDATE_URL)) { + return 'http://doNotTryToXSS.invalid'; + } + } return isset($_GET[$name]) ? $_GET[$name] : $default; }