Recently I have done checkmarx scan and while analyzing it shows me one soql query in controller method and totally unrelated variables in VF page. For example
Note a: [select id, OwnerId, Owner.Name, body from Note where Id In: recordIdList
is shown as the query from controller and
which is totally independent of the above query so I am confused what to do as a fix for this stired XSS issue. Any help will be appreciated.