---
title: "Redirects To User-Controlled Locations Should Be Avoided"
description: "Impact Area Security Severity High Affected Element Apex Class ## Rule ID **SF-0019** ## Impact Redirects to user-controlled locations can be used by attackers to redirect users to phishing sites. ## Remediation Do not allow uncontrolled redirects. ### Time to…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/pmd-rules/redirects-to-user-controlled-locations-should-be-avoided/"
updated: "2025-03-21"
category: PMD Rules
---

# Redirects To User-Controlled Locations Should Be Avoided

Impact Area

Security

Severity

High

           Affected Element

Apex Class

## Rule ID

**SF-0019**

## Impact

Redirects to user-controlled locations can be used by attackers to redirect users to phishing sites.

## Remediation

Do not allow uncontrolled redirects.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-284 Improper Access Control](https://cwe.mitre.org/data/definitions/284.html).