Skip to content

HTTP Request

Terms

QueryString

The HTTP query string is specified by the values following the question mark (?).

Query strings are contained in request headers. It is wise to not trust the data that is contained in headers, as this information can be falsified by malicious users.

As a security precaution, always encode header data or user input before using it. Alternatively, you can validate header data and user input with a short function.

References