Skip to main content
5 votes
Accepted

The CheckMarx security scanner says that these lines is a Query: XSRF Error

Performing any DML during a page's action method is a security concern. This is because people can cause your code to run without the user's consent. For example, consider what happens if someone puts ...
sfdcfox's user avatar
  • 495k
1 vote

Fix checkmarx report issue Client DOM XSRF

parent.location = self.location; is used for reloading the page. Since, you are assigning the location, there is a chance that parameters can also be assigned directly which in-turn can modify ...
salesforce-sas's user avatar
1 vote

The CheckMarx security scanner says that these lines is a Query: XSRF Error

I have fixed the issue. The problem is we cannot use any DML statement in the action method. SO i have moved the DML statements and it passed the checkmarx test. I have chnaged the controller as ...
AKSHAY Dhiman's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible