title: How to make Classic ASP querystring parameter not to pass code. Security issue
body: <p>I have a Classic ASP page(Like below),</p>
  
  <pre><code>/Test.asp?url="%0a%0dmsgbox("Test%20XSS")%0a%0ddim%20test%0a%0dtest="
  </code></pre>
  
  <p>We are passing URL as Query string.But when we pass the above parameter,
  it is displaying the message(because of msgbox) before the page loads.</p>
  
  <p>Is there any way that we can stop executing the script in the query parameter? i.e secure the query string.</p>
  
  <p>Thanks in advance for the help.</p>