IsDefined

[community_help]

This question was posted in response to the following article: http://help.adobe.com/en_US/ColdFusion/9.0/CFMLRef/WSc3ff6d0ea77859461172e0811cbec22c24-7fbd.html

[steveurow]

there seems to me to be a security risk here. IsDefined("string") where string is from a url parameter or a form could be of the nature of being a javascript that is executed ! This can allow all sorts of access to webpages and code insertion right?

[12Robots]

Could you offer an example of where this might be a security risk? I am not sure I see how checking to see if a variable exists would cause a problem. Perhaps an example could help clear it up.

jason