function readOnly(count){ }
Sign Up ›
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
Learn More

Browse by Topic
ShowAll Questionssorted byDate Posted
+ Start a Discussion
ZedroidZedroid 

Cross-site-scripting Error

Hi All,

 

I have a included a script in vf page performs an event onclick, when I tried to scan this on runner I got error.
It would be appreciative  if any one rectify where I am getting stuck, here is my code:

 

<td onmouseover="selectCursor(this,'{!var.ValueBool}')" width="292" align="center" 

onClick="selectPopup('{!var.Value1}','{!mySelect}','{!Name}','{!var.ValueBool}');" >


Regards,

Syed Zubair.

IspitaIspita

Hi syed,

Please provide the actual error message encountered...
Chamil MadusankaChamil Madusanka

Hi,

Please use JSENCODE for javascript parameters,

 

<td onmouseover="selectCursor(this,'{!var.ValueBool}')" width="292" align="center" 

onClick="selectPopup('{!JSENCODE(var.Value1)}','{!JSENCODE(mySelect)}','{!JSENCODE(Name)}','{!JSENCODE(var.ValueBool)}');" >

 

 

Refer following link.

http://wiki.developerforce.com/page/Secure_Coding_Cross_Site_Scripting

 

If a reply to a post answers your question or resolves your problem, please mark it as the solution to the post so that others may benefit.