---
title: Static Resource Rules
description: "The following table shows the list of Salesforce Static resource rules that are checked by Quality Clouds. | Best Practice | Issue Severity | Impact Area | | --- | --- | --- | | [Use of Open Source Javascript…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/configuration-elements/static-resource-rules/"
updated: "2025-03-21"
category: By Configuration Elements
---

# Static Resource Rules

The following table shows the list of Salesforce Static resource rules that are checked by Quality Clouds.

| Best Practice | Issue Severity | Impact Area |
| --- | --- | --- |
| [Use of Open Source Javascript framework](https://qualityclouds.com/documentation/docs/qc/salesforce-rules/use-of-open-source-javascript-framework/) | Warning | Manageability |
| [XSS vulnerability in Ext JS Action Column getTip](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/xss-vulnerability-in-ext-js-action-column-gettip/) | Warning | Security |
| [AngularJS - Prototype Pollution Vulnerability under 1.7.9](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-prototype-pollution-vulnerability-under-1-7-9/) | High | Security |
| [AngularJS - XSS vulnerability using AngularJS under 1.6.9 with Firefox](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-using-angularjs-under-1-6-9-with-firefox/) | High | Security |
| [AngularJS - XSS vulnerability through the attribute "usemap" from 1.3.0 to 1.5.0-rc2](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-through-the-attribute-usemap-from-1-3-0-to-1-5-0-rc2/) | High | Security |
| [AngularJS - XSS vulnerability through the attribute "usemap" from 1.0.0 to 1.2.30](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-through-the-attribute-usemap-from-1-0-0-to-1-2-30/) | High | Security |
| [AngularJS - XSS vulnerability using AngularJS under 1.6.5 in Firefox and Safari - sanitize on inert Documents](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-using-angularjs-under-1-6-5-in-firefox-and-safari-sanitize-on-inert-documents/) | High | Security |
| [AngularJS - XSS vulnerability under 1.8.0 - input HTML](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-xss-vulnerability-under-1-8-0-input-html/) | High | Security |
| [AngularJS - Denial of Service attack through DOM clobbering on versions under 1.6.3](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/angularjs-denial-of-service-attack-through-dom-clobbering-on-versions-under-1-6-3/) | High | Security |
| [jQuery - XSS vulnerability under 3.5.0, when using htmlPrefilter](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-3-5-0-when-using-htmlprefilter/) | High | Security |
| [XSS vulnerability in Ext JS Action Column getTip](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/xss-vulnerability-in-ext-js-action-column-gettip/) | High | Security |
| [jQuery - Prototype Pollution Vulnerability under 3.4.0](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-prototype-pollution-vulnerability-under-3-4-0/) | High | Security |
| [jQuery - XSS vulnerability under 1.6.3, when using location.hash](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-1-6-3-when-using-location-hash/) | High | Security |
| [jQuery - XSS vulnerability under 1.9.0, when using jQuery(strInput)](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-1-9-0-when-using-jquerystrinput/) | High | Security |
| [jQuery - XSS vulnerability under 3.0.0, when making cross-domain calls without the dataType option](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-xss-vulnerability-under-3-0-0-when-making-cross-domain-calls-without-the-datatype-option/) | High | Security |
| [jQuery-ui-tooltip - XSS vulnerability under 1.10.0, title attribute](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-ui-tooltip-xss-vulnerability-under-1-10-0-title-attribute/) | High | Security |
| [jQuery-ui-dialog - XSS vulnerability under 1.10.0, title attribute](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-ui-dialog-xss-vulnerability-under-1-10-0-title-attribute/) | High | Security |
| [jQuery-ui-dialog - XSS vulnerability under 1.10.0, closeText parameter](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/jquery-ui-dialog-xss-vulnerability-under-1-10-0-closetext-parameter/) | High | Security |
| [moment.js - Regular Expression Denial of Service Vulnerability](https://qualityclouds.com/documentation/docs/qc/vulnerabilities-in-open-source-libraries/moment-js-regular-expression-denial-of-service-vulnerability/) | High | Security |