Avoid Processing Unescaped URL Parameters

< 1 min read

Impact Area

Manageability

Severity

Medium

Affected Element

Apex  Class

Rule ID #

SF-0045

Impact #

URL parameters can be an attack vector for cross-site and code injection attacks.

Remediation #

Make sure that all values obtained from URL parameters are properly escaped / sanitized to avoid XSS attacks.

Time to fix #

60 min

Updated on March 21, 2025
Was it helpful ?