Skip to main content

Questions tagged [xsrf]

Cross Site Request Forgery

Filter by
Sorted by
Tagged with
0 votes
1 answer

Fix checkmarx report issue Client DOM XSRF

In vfComponent parent.location = self.location; and in checkmarx report it is showing "component gets a parameter from a user request URL from element location. This parameter value flows ...
cloudZigZag's user avatar
  • 1,376
0 votes
1 answer

Code Scanner Report Query: XSRF Apex Serious Security Risk [duplicate]

I ran CheckMarx security code scanner and found this 1 security risk issue for a Button on Opportunity that opens a VF page (generates pdf). From the code report, here is the issue mentioned. Can ...
sfdcFanBoy's user avatar
  • 4,064
1 vote
0 answers

DML on page action

I have the following situation in my plate ... On page load, a modal pops up. The modal is invoked on an action attribute in apex:page. The method that is on the action has an upsert operation that ...
MnZ's user avatar
  • 3,170
2 votes
2 answers

The CheckMarx security scanner says that these lines is a Query: XSRF Error

I have a visualforce which is just used to send the Json data when we make a callout to the page with some parameters passed in the URL. Error is showing in the following line. Please help in get ...
AKSHAY Dhiman's user avatar
0 votes
1 answer

Source Scanner Cross Site Request Forgery (XSRF) spanning apex:commandButton

I'm getting results back from the source scanner for XSRF issues where the result path spans an apex:commandButton. A number of the XSRF paths in my report follow a pattern: In the controllers ...
Daniel Ballinger's user avatar
7 votes
4 answers

Cross-Site Request Forgery (CSRF) CWE

I have Following page: <apex:page controller="myclass" action={!clean}> </apex:page> and controller class as: public with sharing class myclass { public void clean() { List<...
miku's user avatar
  • 1,761
5 votes
1 answer

Cross-Site Request Forgery (CSRF)

I have this method that is executed on page action: .... public PageReference validatePage(){ Id someId; MyObject__c myObj; try{ someId = ApexPages.currentPage().getParameters()....
Ivo Rocha's user avatar
  • 435