function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
soni rajputsoni rajput 

Problem of XSS attack

Hi,

 

I am going to launch an app exchange app but in my code i am using <apex: outputText escape="False"> and this line giving XSS attack issue.  So how to resolve this issue?

 

its Urgent.

 

Thanks,

Soni

Best Answer chosen by Admin (Salesforce Developers) 
Force.comForce.com

Hi Soni,

 

This issue can be resolved by using Dynamic Visualforce. Here is a wonderful blog by Tehnrd in which he explains how to use dynamic visualforce 

 

http://www.tehnrd.com/dynamic-visualforce-components-why-they-scare-the-ish-out-of-me/

 

Thanks,

Pragati

All Answers

bob_buzzardbob_buzzard

If you need to be able to output HTML markup, the only other way I can think of to do that is to copy the information into a rich text area field. Obviously that has to be on an sobject, so you'll need to create one, or re-use and existing one, to act as a carrier for this data.
Force.comForce.com

Hi Soni,

 

This issue can be resolved by using Dynamic Visualforce. Here is a wonderful blog by Tehnrd in which he explains how to use dynamic visualforce 

 

http://www.tehnrd.com/dynamic-visualforce-components-why-they-scare-the-ish-out-of-me/

 

Thanks,

Pragati

This was selected as the best answer