Merge pull request #107 from mehulmpt/master

Parsed down the URL parameter which earlier allowed XSS on page

Author: oscarotero

demo/index.php

@@ -6,6 +6,11 @@
 
 function get($name, $default = '')
 {
+    if($name == 'url') {
+        if(filter_var($_GET['url'], FILTER_VALIDATE_URL)) {
+            return 'http://doNotTryToXSS.invalid';
+        }
+    }
     return isset($_GET[$name]) ? $_GET[$name] : $default;
 }