Apex Code Development You need to sign in to do that
Don't have an account?
Cross-site-scripting Error
Hi All,
I have a included a script in vf page performs an event onclick, when I tried to scan this on runner I got error.
It would be appreciative if any one rectify where I am getting stuck, here is my code:
<td onmouseover="selectCursor(this,'{!var.ValueBool}')" width="292" align="center"
onClick="selectPopup('{!var.Value1}','{!mySelect}','{!Name}','{!var.ValueBool}');" >
Regards,
Syed Zubair.
Hi syed,
Please provide the actual error message encountered...
Hi,
Please use JSENCODE for javascript parameters,
<td onmouseover="selectCursor(this,'{!var.ValueBool}')" width="292" align="center" onClick="selectPopup('{!JSENCODE(var.Value1)}','{!JSENCODE(mySelect)}','{!JSENCODE(Name)}','{!JSENCODE(var.ValueBool)}');" >Refer following link.
http://wiki.developerforce.com/page/Secure_Coding_Cross_Site_Scripting
If a reply to a post answers your question or resolves your problem, please mark it as the solution to the post so that others may benefit.