Matching <script> or <iframe onload in querystring

i am facing xxs problem and i am using ISAPI Rewite 3. I want to detect if a querystring contains ... or 开发者_JAVA技巧redirect it to my home page.

Try using the following structure:

RewriteEngine on
RewriteBase /

RewriteCond %{QUERY_STRING} ^(.*iframe.*)$
RewriteRule .* http://www.domain.com [NC,R=301,L]