Questions tagged [xsrf]

Cross Site Request Forgery

Filter by
Sorted by
Tagged with
0
votes
1answer
12 views

Fix checkmarx report issue Client DOM XSRF

In vfComponent parent.location = self.location; and in checkmarx report it is showing "component gets a parameter from a user request URL from element location. This parameter value flows ...
0
votes
1answer
123 views

Code Scanner Report Query: XSRF Apex Serious Security Risk [duplicate]

I ran CheckMarx security code scanner and found this 1 security risk issue for a Button on Opportunity that opens a VF page (generates pdf). From the code report, here is the issue mentioned. Can ...
1
vote
0answers
221 views

DML on page action

I have the following situation in my plate ... On page load, a modal pops up. The modal is invoked on an action attribute in apex:page. The method that is on the action has an upsert operation that ...
2
votes
2answers
468 views

The CheckMarx security scanner says that these lines is a Query: XSRF Error

I have a visualforce which is just used to send the Json data when we make a callout to the page with some parameters passed in the URL. Error is showing in the following line. Please help in get ...
0
votes
1answer
890 views

Source Scanner Cross Site Request Forgery (XSRF) spanning apex:commandButton

I'm getting results back from the source scanner for XSRF issues where the result path spans an apex:commandButton. A number of the XSRF paths in my report follow a pattern: In the controllers ...
7
votes
4answers
1k views

Cross-Site Request Forgery (CSRF) CWE

I have Following page: <apex:page controller="myclass" action={!clean}> </apex:page> and controller class as: public with sharing class myclass { public void clean() { List<...
5
votes
1answer
5k views

Cross-Site Request Forgery (CSRF)

I have this method that is executed on page action: .... public PageReference validatePage(){ Id someId; MyObject__c myObj; try{ someId = ApexPages.currentPage().getParameters()....