The security-review tag has no wiki summary.
2
votes
1answer
26 views
XSRF issue in security review..?
I am getting these from URL..when i submitted my app for security review.
their report has XSRF error
can some help me how to correct this...as i need to oid from the url.i could find any ...
6
votes
4answers
51 views
Cross-Site Request Forgery (CSRF) CWE
I have Following page:
<apex:page controller="myclass" action={!clean}>
</apex:page>
and controller class as:
public with sharing class myclass
{
public void clean()
{
...
3
votes
1answer
80 views
Drag & Drop Upload Images to documents - Security Problems
We have developed a Drag & Drop multiple Image Upload with Html5, jQuery and the REST API.
We are wondering what are the problems that this feature can bring up in the security review.
Let me ...
0
votes
1answer
25 views
Running ApexClasses in PE with Security Review and Certification
I've a managed package which I would like to be installed in a Professional Edition.
When I try to install the package in the PE, I get following error, of course my package has few ...
9
votes
2answers
83 views
Incomplete code blocks vulnerability
I've submitted my application for Security Review and I've got this problem in the report.
I'm not sure how to fix it.
Let's see the First case:
I have some classes that don't have any code like ...
1
vote
1answer
82 views
How do I run burp scanner
How do I run burp scan? Do I have to buy a burp suite? What is partner license mentioned in this url?
2
votes
2answers
137 views
Sign up for partner portal
Creating partner portal is free. Please correct me if I am wrong. I want to start security review for a free application from my AppExchange profile but I can't do that before paying to salesforce. Is ...
