In spite all the fixes I don't want to have XSS attack.
Any example for url_rewriting applied at this case?

Thank you
Fab