Free URL Parser & Query String Viewer

Paste any URL and see every part broken out · protocol, host, path, and each query parameter decoded into a readable table.

Frequently asked

Why do query parameters matter for security?

They're user input. Parameters echoed into the page unsanitized are the classic reflected-XSS vector, and tokens or PII in query strings leak into server logs, analytics, and Referer headers.

What's the difference between the fragment and the query?

The query (?a=b) is sent to the server; the fragment (#section) never leaves the browser. That's why OAuth implicit flows put tokens in fragments · and why servers can't log them.

Related tools

  • Subnet Calculator · Enter CIDR notation like 10.0.0.0/24 and get the full picture · network, broadcast, usable range, mask, and how many hosts fit.
  • chmod Calculator · Toggle read/write/execute for owner, group, and others · and get the octal and symbolic chmod notation both ways.
  • Color Contrast Checker · Pick a text and background color and get the WCAG contrast ratio · with pass/fail for AA and AAA at normal and large text sizes.

Run a full security scan →