Further changes for "Client-side HTTP parameter pollution (reflected)"

src/Presentation/Nop.Web.Framework/Controllers/BaseController.cs

@@ -250,6 +250,8 @@ protected virtual void AddLocales<TLocalizedModelLocal>(ILanguageService languag
         /// Security check URL
         /// </summary>
         /// <param name="filterContext">The action executing context</param>
+        /// <remarks>Since the name of the optional URL parameter is copied into the response in the query string of the URL, 
+        /// you cannot enter arbitrary parameters of the query string in the application URL</remarks>
         public override void OnActionExecuting(ActionExecutingContext filterContext)
         {
             var path = Request.Path.HasValue ? Request.Path.ToString() : "";