安全读取查询字符串参数的最佳方法？

We have a project that generates a code snippet that can be used on various other projects. The purpose of the code is to read two parameters from the query string and assign them to the "src" attribute of an iframe.We have a project that generates a code snippet