Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [reflected-xss]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
45 views

Reflected XSS vulnerability in checkmarx

The CheckMarx security scanner says that the below line is a Reflected XSS vulnerability. zip = apexpages.currentpage().getparameters().get('gnfzipcode').escapeHtml4(); The above code is from an Apex ...
Aditya Negi's user avatar
0 votes
1 answer
2k views

How vulnerable is Salesforce to XSS attacks?

I'm working through tightening up our security and I'm curious about the vulnerabilities that are legitimate in Salesforce. I know that there are plenty of vague descriptions about "XSS Scripting&...
thinker's user avatar
  • 1,440
0 votes
1 answer
367 views

How to fix SOQL Query Stored XSS

I have given my code for Security code Scanner but it is given the following error due to String attachmentQuery = 'SELECT id,E2CAdv__Attachment__c, E2CAdv__CaseId__c, E2CAdv__Attachment_links__c, ...
Sonu Sagar's user avatar
0 votes
1 answer
444 views

RichText area field not eliminating XSS issue in checkmarx

I am writing escape=false in my VF Page like this. <apex:outputText escape="false" value="{!cr.Message__c}" rendered="{!(cr.Message__c)!= ''}"/><br/><br/> The Mesage__c is a custom ...
AJoshi's user avatar
  • 33
0 votes
1 answer
1k views

Display a page in an iframe from a diferent domain

I am trying to build a simple visualforce page with an iframe. my page: <apex:page> <apex:iframe src="http://my.website.com" scrolling="true" id="theIframe"/> </apex:page> ("...
RealGigex's user avatar
  • 175
0 votes
1 answer
1k views

Stored XSS in database.query

We have submitted our code to security review. i'm facing stored xss vulnarabities as described in below lines, please some one help me on this. public map<string,RecordType> RecordTypeMap(...
SFDC_Igle's user avatar
  • 692
2 votes
1 answer
305 views

Cross Site Scripting issue

I am getting XSS issue for the following statements in my code : a. lstDisplay.add(new SelectOption('','--None--')); b. lstDisplay.add(new SelectOption(selectOptionObj.getValue(),selectOptionObj....
Smitha's user avatar
  • 325
2 votes
1 answer
2k views

Reflected XSS problem

Checkmarx is flagging these lines as Reflected XSS,Lately I have been doing a lot of research on this but couldn't solve this one can someone point me as to why these are major security threats? ...
user avatar
3 votes
1 answer
11k views

How do I fix Stored XSS and Reflected XSS?

When submitted my code for force.com scanning, I got a few error in the report which are "Reflected XSS and Stored XSS". So, would like to know if these are due to the usage of "jQuery, javascript and ...
Sapthagiri's user avatar