---
title: Avoid Processing Unescaped URL Parameters
description: "Impact Area Manageability Severity Medium Affected Element Apex  Class ## Rule ID **SF-0045** ## Impact URL parameters can be an attack vector for cross-site and code injection attacks. ## Remediation Make sure that all values obtained from URL parameters are…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/pmd-rules/avoid-processing-unescaped-url-parameters/"
updated: "2025-03-21"
category: PMD Rules
---

# Avoid Processing Unescaped URL Parameters

Impact Area

Manageability

           Severity

Medium

           Affected Element

Apex  Class

## Rule ID

**SF-0045**

## Impact

URL parameters can be an attack vector for cross-site and code injection attacks.

## Remediation

Make sure that all values obtained from URL parameters are properly escaped / sanitized to avoid XSS attacks.

### Time to fix

60 min