Redirects To User-Controlled Locations Should Be Avoided

< 1 min read

Impact Area

Security

Severity

High

Affected Element

Apex Class

Rule ID #

SF-0019

Impact #

Redirects to user-controlled locations can be used by attackers to redirect users to phishing sites.

Remediation #

Do not allow uncontrolled redirects.

Time to fix #

30 min

References #

This rule is linked to Common Weakness Enumeration CWE-284 Improper Access Control.

Updated on March 21, 2025
Was it helpful ?