Questions tagged [reflected-xss]
The reflected-xss tag has no usage guidance.
11
questions
0
votes
0
answers
22
views
How to resolve Stored/Reflected XSS for arguments passed to JS functions in a VF page?
Overview:
I am looking for ways to bypass Stored/Reflected XSS issues that are showing up as part of CheckMarx Scan report for the arguments passed to js functions in a VF Page, given that queries in ...
1
vote
1
answer
63
views
XSS attack on a Boolean variable
Checkmarx is detecting XSS vulnerability on my code which contains a boolean variable is_Private_Label__c.
Is there any way to fix this issue as we can't add the JSENCODE here as the data type is ...
- 23
0
votes
0
answers
104
views
Reflected XSS vulnerability in checkmarx
The CheckMarx security scanner says that the below line is a Reflected XSS vulnerability.
zip = apexpages.currentpage().getparameters().get('gnfzipcode').escapeHtml4();
The above code is from an Apex ...
- 23
0
votes
1
answer
2k
views
How vulnerable is Salesforce to XSS attacks?
I'm working through tightening up our security and I'm curious about the vulnerabilities that are legitimate in Salesforce. I know that there are plenty of vague descriptions about "XSS Scripting&...
- 1,462
0
votes
1
answer
414
views
How to fix SOQL Query Stored XSS
I have given my code for Security code Scanner but it is given the following error due to
String attachmentQuery = 'SELECT id,E2CAdv__Attachment__c, E2CAdv__CaseId__c, E2CAdv__Attachment_links__c, ...
0
votes
1
answer
471
views
RichText area field not eliminating XSS issue in checkmarx
I am writing escape=false in my VF Page like this.
<apex:outputText escape="false" value="{!cr.Message__c}" rendered="{!(cr.Message__c)!= ''}"/><br/><br/>
The Mesage__c is a custom ...
- 33
0
votes
1
answer
1k
views
Display a page in an iframe from a diferent domain
I am trying to build a simple visualforce page with an iframe.
my page:
<apex:page>
<apex:iframe src="http://my.website.com" scrolling="true" id="theIframe"/>
</apex:page>
("...
- 175
0
votes
1
answer
1k
views
Stored XSS in database.query
We have submitted our code to security review. i'm facing stored xss vulnarabities as described in below lines, please some one help me on this.
public map<string,RecordType> RecordTypeMap(...
- 692
2
votes
1
answer
310
views
Cross Site Scripting issue
I am getting XSS issue for the following statements in my code :
a. lstDisplay.add(new SelectOption('','--None--'));
b. lstDisplay.add(new SelectOption(selectOptionObj.getValue(),selectOptionObj....
- 325
2
votes
1
answer
2k
views
Reflected XSS problem
Checkmarx is flagging these lines as Reflected XSS,Lately I have been doing a lot of research on this but couldn't solve this one can someone point me as to why these are major security threats?
...
user13277
3
votes
1
answer
11k
views
How do I fix Stored XSS and Reflected XSS?
When submitted my code for force.com scanning, I got a few error in the report which are "Reflected XSS and Stored XSS". So, would like to know if these are due to the usage of "jQuery, javascript and ...
- 931