Skip to main content
All CollectionsRule documentationVulnerability protection
Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery (CSRF)

Detect Cross-Site Request Forgery vulnerabilities in your Salesforce app.

Lorenzo Frattini avatar
Written by Lorenzo Frattini
Updated over 6 years ago

Rationale

Web browsers allow GET and POST requests to be made between different web sites. Cross-site request forgery (CSRF or XSRF) occurs when a user visits a malicious web page that makes their browser send requests to your application that the user did not intend.

Scope

  • Visualforce pags

  • Visualforce components

  • Apex controllers

Did this answer your question?