Html with parameters GET

Question

I have a doubt about this sentence in html:

    <a href="http://www.donate.co?amount=100&amp;destination=MessageTable/">

and this:

     <a href="http://www.donate.co?amount=100&destination=MessageTable/">

This sentence pass paramaters with GET. But I don't undertand because in the first sentence put & amp; and the second sentence put & only.

Thank you,

regards, javi

score 2 · Answer 1 · answered Nov 18 '16 at 10:38

2

In HTML & means "Start of an entity / character reference".

< is how you say greater than instead of saying start of tag.

& is how you say ampersand instead of saying start of entity

answered Nov 18 '16 at 10:38

Quentin

Ok, If I want to use this concept for doing an atttack XSRF. I can do it. How could I do it? Thank you so much – Javier MCar Mcar Nov 19 '16 at 10:38
You can't. Entity escaping has nothing to do with cross site request forgery. – Quentin Nov 19 '16 at 12:24
Hi, I found the solution. – Javier MCar Mcar Nov 22 '16 at 12:32

1 Answers1