Shopping Cart

No products in the cart.

Quality Clouds Community
Quality Clouds Community

Calls To addError With Disabled Escaping Should Be Avoided

< 1 min read

Impact Area

Security

Severity

High

Affected Element

Apex Class

Rule ID #

SF-0021

Impact #

The message passed to addError will be displayed directly to the user in the UI, making it prime ground for XSS attacks if unescaped.

Remediation #

Ensure that all calls to the addError function are escaped.

Time to fix #

60 min

Updated on March 21, 2025
Table of contents
Was it helpful ?

Report

Harassment or bullying behavior
Contains mature or sensitive content
Contains misleading or false information
Contains abusive or derogatory content
Contains spam, fake content or potential malware

Block Member?

Please confirm you want to block this member.

You will no longer be able to:

  • See blocked member's posts
  • Mention this member in posts
  • Invite this member to groups

Please allow a few minutes for this process to complete.

Report

You have already reported this .