In vfComponent parent.location = self.location; and in checkmarx report it is showing
"component gets a parameter from a user request URL from element location. This parameter value flows through the code and is eventually used to modify database contents. The application does not require renewed user authentication for the request. This may enable Cross-Site Request Forgery (XSRF)."
how to fix this issue.