Also https://www.google.com/foobar uses JS to set the src of the iframe holding https://foobar.withgoogle.com and appends window.location.search to it.