7
I notice that Chrome does not execute scrips that are part of the web request,
http://vulnerable_site?pageTitle=<script>alert('xss')</script>
With such links since the script is as part of the web request, Chrome does not execute the script. Does that prevent all kinds of Reflected XSS attacks ...