guys I've made a test:
http://www.lolnexus.com/scouter/search?name=sk+ocelote&serve...
player SK ocelote is playing right now on EUW server
In google chrome I've made changes to test
<input type="text" class="span7" name="name" autofocus="autofocus" onchange="javascript:this.value=this.value.toLowerCase();" placeholder="Enter a player currently in an active match" style="height:30px;">
name="name" to name="fewnfewo"
name="name" to name="sk ocelote"
name="name" to abc="name"
neither one works
the GET need's to be to work http://www.lolnexus.com/scouter/search?name=sk+ocelote&serve...
the last one abc="name" sends get:
http://www.lolnexus.com/scouter/search?server=EUW
I'm asking myself if there is a possibility of exploit from client side? But I don't have required knowledges to recognize.
ps: this is just an example from a real application. Trying to explain what I've thought.