Questions tagged [xss]

The tag has no usage guidance.

8 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
513 views

How to Address DOM-based XSS from Security Review

I have a remoting function on my page that takes a list of contacts, and displays them in on Lightning Design styled page. It works fine, but the final innerHTML statement gets flagged in security ...
2
votes
1answer
751 views

Content Security Policy in Embedded Service's Post-chat VF page

Hi Salesforce community! I have set up an embedded service with a Post-chat page, which is overriden by a simple Visualforce page. The VF page code is very simple: <apex:page showHeader="false"&...
2
votes
0answers
347 views

The CheckMarx security scanner gives error on Stored XSS vulnerability

I have a javaScript method in my visualforce page, which is adding a css when page loads. Code adds the css to radio buttons to look similar to Lightning radio buttons. var Row = document....
1
vote
0answers
214 views

XSS: Best way to encode href for anchor tags

What would be the best way to sanitize a user input for href on anchor tags? I've been looking at this library that is created and approved by Salesforce (SecureFilters) Looking at the different ...
1
vote
1answer
336 views

How do I fix Stored XSS error in salesforce?

The CheckMarx security scanner says that this line is a Stored XSS vulnerability. if(!{!acc.IsActive__c} && reqNDA == 'true' && document.getElementById(elem).checked){ in the ...
0
votes
0answers
37 views

Unable to disable XSS-Protection

I am trying to disable XSS-Protection for our SF Org (Community portal) as its deprecated. I disabled it under Session settings 'Enable XSS-Protection'. However I still see it, set to 1 mode=block ...
0
votes
0answers
80 views

Injection Vulnerability Prevention

I am getting error in Understand Cross-Site Scripting (XSS) There was an unhandled exception. Please reference ID: OODKFWIY. Error: Restforce::ErrorCode::InvalidType. Message: INVALID_TYPE: select id ...
0
votes
1answer
503 views

Reflected XSS issue

I have found this issue when I have given my code to Code Scanner Reflected XSS This is basically because of two things Map<string,string> params = ApexPages.currentPage()....