To answer you latest question: this happens only when I am NOT logged in.
As soon as I log in, this doesn't happen.
And if I add
Code:
?foobar'});}};--></script>foobar2<script>alert(42)</script>
to any URL after a forward slash, it happens again.
Example:
Code:
mysite.com/?foobar'});}};--></script>foobar2<script>alert(42)</script>
Thanks.
