Go to Clayton
All Collections
Rule documentation
Vulnerability protection
Cross-Site Scripting (XSS)

Cross-Site Scripting (XSS)

Detect expressions that might be vulnerable to Cross-Site Scripting (XSS) in Apex, Visualforce and Lightning components.
Lorenzo Frattini avatar
Written by Lorenzo Frattini. Updated over a week ago

Rationale

Cross-site scripting (XSS) attacks cover a broad range of attacks where malicious HTML or client-side scripting is provided to a Web application. The Web application includes malicious scripting in a response to a user of the Web application.

  • Apex classes

  • Lightning components

  • Visualforce pages

  • Visualforce controllers

Did this answer your question?