Questions tagged [checkmarx]
The checkmarx tag has no usage guidance.
16
questions with no upvoted or accepted answers
2
votes
1
answer
1k
views
checkmarx scan Dereferenced Field issue
I submitted code in checkmarx and in the result i got error as "Dereferenced Field" on following lines :
source as :
....
61. else return new
PageReference('/'+Vendor_Invoice_Line__c.sobjecttype....
- 580
2
votes
0
answers
657
views
The CheckMarx security scanner gives error on Stored XSS vulnerability
I have a javaScript method in my visualforce page, which is adding a css when page loads.
Code adds the css to radio buttons to look similar to Lightning radio buttons.
var Row = document....
- 21
1
vote
0
answers
66
views
Checkmarx reporting wrong function name?
I just ran a Checkmarx scan today. It reported the following Apex Serious Security Risk:
You can see the report is making a reference to isCreatable(). However, the name of the method in my Apex code ...
- 510
1
vote
0
answers
410
views
Transport False-Positive comments to Checkmarx report
I want to find the best way to address false positives in the Checkmarx report. One of the points I am investigating is how to make the Checkmarx report to display the false positive comment that has ...
- 695
1
vote
0
answers
238
views
Run Checkmarx on code not in packaging org (too big for Community scanner)
I am consulting an ISV partner with their resubmission of the Salesforce Security Review.
They ran the initial Checkmarx scan using the Partner Scanner on the code in their Packaging org, then fixed ...
- 37.7k
1
vote
0
answers
284
views
Not able to fix checkmarx scanner issue
I am trying to fix checkmarx scanner issue in different ways but nothing helps to fix FLS Update and Crete.
Below are the things I tried
if(Schema.sObjectType.ProviderRecordQuestion__c.fields....
- 371
1
vote
1
answer
154
views
Query: Password APIs Issue on Salesforce Security Report
We have a scenario to allow the user to reset the password for the community users, We have used the following snippet
System.resetPassword(userId, true);
So its blocked in the security report under ...
1
vote
0
answers
301
views
DML on page action
I have the following situation in my plate ...
On page load, a modal pops up.
The modal is invoked on an action attribute in apex:page.
The method that is on the action has an upsert operation that ...
- 3,170
0
votes
0
answers
35
views
Reflected XSS vulnerability in checkmarx
The CheckMarx security scanner says that the below line is a Reflected XSS vulnerability.
zip = apexpages.currentpage().getparameters().get('gnfzipcode').escapeHtml4();
The above code is from an Apex ...
- 11
0
votes
1
answer
113
views
How to scan the Second Generation managed package code on Checkmarx Scanner from Partner Security Portal
I have created a second generation managed package using the dev hub org and namespace org and I have connected the dev hub org in the organizations subtab in publishing tab. But when I tried to login ...
- 133
0
votes
0
answers
71
views
CheckMarx FLS Security Issue
I have applied updatable check still checkmarx report showing issues,Any idea..
Code:
Account Ac=new Account();
Ac.level_of_care__c='hhs';
if(Schema.sobjecttype.Account.isUpdateable() && ...
- 68
0
votes
0
answers
864
views
Getting checkmarx FLS_Create Error in apex
Checkmarx is giving me the FLS_Create error in the below code.
cv.PathOnClient = docName;
cv.VersionData = requestbody;
cv.ContentLocation = 'S';
cv....
- 3
0
votes
0
answers
1k
views
Checkmarx report getting Recurring false postives
Salesforce complete org i have checked the details like security and Quality in this Checkmarx Report documentation showing Recurring false postives, if it is possible to remove recurring false ...
- 1,366
0
votes
1
answer
434
views
RichText area field not eliminating XSS issue in checkmarx
I am writing escape=false in my VF Page like this.
<apex:outputText escape="false" value="{!cr.Message__c}" rendered="{!(cr.Message__c)!= ''}"/><br/><br/>
The Mesage__c is a custom ...
- 33
0
votes
1
answer
455
views
Salesforce Checkmarx Integration
We need to setup the CheckMarx code scanner eclipse plug-in for Salesforce org.
While scanning from eclipse we are getting the server connection error massage :
1. We have downloaded the CxSAST ...
- 17
0
votes
0
answers
4k
views
ISCLONE() and Workflow Rules against CLONED records
I am trying to create some business logic that resets a cloned Opportunity check-box field to FALSE if that Opportunity record is cloned (our sales team will clone opportunities with the same accounts ...
- 553