All Questions
Tagged with stored-xss checkmarx
7 questions
0
votes
0
answers
24
views
How to resolve JSON serialized object for Stored XSS in checkmarx scanner
We are trying to use JSON serialized Sobject in our VF page. Checkmarx is throwing out an Stored XSS error.
We are querying a Sobject and using that JSON.Serailized object in our js in Vf page.
Class:
...
- 12.4k
1
vote
1
answer
80
views
XSS attack on a Boolean variable
Checkmarx is detecting XSS vulnerability on my code which contains a boolean variable is_Private_Label__c.
Is there any way to fix this issue as we can't add the JSENCODE here as the data type is ...
- 23
0
votes
1
answer
3k
views
The CheckMarx security scanner says that these lines is a Stored XSS
Do not know why checkmarx throwing these errors. As there is nothing that needs to be HTMLENCODE. Although VF page showing the data that is being added from Line 344 and 345 from a <apex:...
- 397
8
votes
2
answers
3k
views
Checkmarx and JSON.serialize
My Salesforce1 code has been recently run through Force.com Security Scanner (a.k.a. Checkmarx). A stored XSS vulnerability has been found and marked as critical security risk.
It boils down to ...
- 24.2k
3
votes
2
answers
2k
views
How do I fix this Stored XSS?
The CheckMarx security scanner says that this line is a Stored XSS vulnerability
<apex:column style="background-color:#{!trade.bgcolor};color:{!trade.fgcolor};">
is this HTMLENCODE the correct ...
- 745
1
vote
2
answers
9k
views
How do I fix this Reflected XSS vulnerability?
The CheckMarx security scanner says that this line is a Reflected XSS vulnerability.
<apex:outputText value="0,number,#,##0.00}" style="color:!nost.balColor};">
However this page
http://www....
- 745
2
votes
2
answers
4k
views
How do I fix this Stored XSS vulnerability?
The CheckMarx security scanner says that the 4th line:
$j('#h{!category}').on('click', function(event) {
in the following script, causes an XSS vulnerability. Can someone explain the best way to ...
- 745