View Categories

Avoid Processing Unescaped URL Parameters

Table of Contents
Impact Area

Manageability

Severity

Medium

Affected Element

Apex  Class

Rule ID #

SF-0045

Impact #

URL parameters can be an attack vector for cross-site and code injection attacks.

Remediation #

Make sure that all values obtained from URL parameters are properly escaped / sanitized to avoid XSS attacks.

Time to fix

60 min

Powered by BetterDocs