Questions tagged [checkmarx]
The checkmarx tag has no summary.
82 questions
0 votes
0 answers
35 views
Missing Device Lock Verification
Missing_Device_Lock_Verification Getting this at checkmarx for a getter method declared in the model. Query Path ---> java/Java_Android/Missing_Device_Lock_Verification locatin---> Resp.java ( ...
0 votes
0 answers
94 views
How to resolve JSON serialized object for Stored XSS in checkmarx scanner
We are trying to use JSON serialized Sobject in our VF page. Checkmarx is throwing out an Stored XSS error. We are querying a Sobject and using that JSON.Serailized object in our js in Vf page. Class: ...
- 12.4k
0 votes
0 answers
54 views
Checkmarx Cross Site Scripting with JSENCODE
We have run the Checkmarx code scanner for our Visualforce page. In the Visualforce page controller, we have done the SOQL query and get the record name. After that, we are using that record name in ...
0 votes
0 answers
90 views
Releasing Version 2.2 with False Positive FLS Violations – Avoiding Security Review
Hello Salesforce Community, We have a scenario related to our app’s release cycle on AppExchange, and I need some guidance to handle the situation efficiently. Background: We have already released two ...
- 57
0 votes
1 answer
124 views
Force.com code Scanner Portal Inability to Track FLS Checks on Dynamic Objects
In Salesforce Apex, it is often necessary to handle objects and fields dynamically using the generic 'SObject' type. This approach allows for flexible and generic code that can work with different ...
- 57
1 vote
1 answer
86 views
Force.com Checkmarx Scan Job Cancelled Due to Line of Code Limit
I am currently using a Developer Edition Salesforce org and attempting to run a Force.com Checkmarx scan. However, every time I schedule a scan, the job is cancelled with the following message: "...
- 57
1 vote
1 answer
140 views
XSS attack on a Boolean variable
Checkmarx is detecting XSS vulnerability on my code which contains a boolean variable is_Private_Label__c. Is there any way to fix this issue as we can't add the JSENCODE here as the data type is ...
- 13
0 votes
1 answer
372 views
DML Statements Inside Loops Issue in Salesforce Apex Code
While performing a Checkmarx scan on our Salesforce Apex codebase, an issue was reported under the category "DML Statements Inside Loops." Provided lot of lines of code as shown below. But ...
- 57
1 vote
1 answer
446 views
Salesforce Code Analyzer Issues and False-positive documentation
I am preparing for the security review. I have resolved all issues from Checkmarx and I have resolved almost all the errors from the Salesforce Code Analyzer report. There are only 6 items left from ...
- 45
2 votes
0 answers
284 views
CLIENT_DOM_XSS attack being reported by Checkmarx even though we use lightning:input
We use below code to capture Account's FirstName, LastName and some other values. <aura:attribute name="currentAccount" type="Account"/> <lightning:input aura:id="...
- 67
0 votes
1 answer
126 views
SOQl Injection Checkmarx issues
I am getting SOQL Injection checkmarx issue even after applying escapeSingleQuotes. Can you pls tell what should I apply to remove checkmarx issue. Here is Code public static Interaction__c ...
- 11
1 vote
1 answer
147 views
Salesforce package version creation after resolving the errors
We are planning to publish the package to the appexchange security review process before which we have run through a security scan. The package version is 0.1.0-1. After resolving the errors from the ...
- 529
1 vote
0 answers
106 views
Checkmarx reporting wrong function name?
I just ran a Checkmarx scan today. It reported the following Apex Serious Security Risk: You can see the report is making a reference to isCreatable(). However, the name of the method in my Apex code ...
- 709
1 vote
1 answer
303 views
Sending review to the checkmarx where multiple developments are included
I have a org that is connected to the partner community. In this org, there are managed packages, unmanaged packages, and various other developments that includes code that is not required for the ...
- 529
3 votes
1 answer
1k views
Query: FLS Create issue while running checkmarx
I am running multiple classes and have some Query: FLS Create issues while running the checkmarx. I am really not knowing what they mean by this. I feel there is something simple but I cannot discern ...
- 529