[araskoktas]

good, send HttpOnly cookies and solve that problem. window.location.href='http://www.redt*be.com'; -- if you think evaluating JS code, as-is passed by the client is a good idea go ahead.

[genericacct]

I most definitely will. and if my users want to browse your favorite porn site i don't see why i shouldn't let them..