CheckMarx FLS Create/Update Vulnerability in Salesforce Apex Code
As such this is a Checkmarx false positive and must be addressed by explaining the scenario in your submission documentation. This answer covers how you can also best to comment the relevant code …
Why Is Checkmarx Taking So Long To Complete? [closed]
Recently submitted an app to the Force.com source code scanner by CheckMarx, after 5 days still there is no sign of scanning report. It will be helpful if that tool tells some approx waiting period...
Transport False-Positive comments to Checkmarx report
Feb 10, 2023 · I want to find the best way to address false positives in the Checkmarx report. One of the points I am investigating is how to make the Checkmarx report to display the false positive comment …
checkmarx - Missing Device Lock Verification - Salesforce Stack Exchange
Aug 22, 2025 · Start asking to get answers Find the answer to your question by asking. Ask question checkmarx verification
aura attribute - CLIENT_DOM_XSS attack being reported by Checkmarx …
Apr 18, 2024 · Checkmarx is reporting "Client_DOM_XSS" attack for code "value=" {!v.currentAccount.FirstName}" which we do not understand how this is a "Client_DOM_XSS" attack …
security - How Checkmarx works - Salesforce Stack Exchange
May 28, 2015 · Can someone please advise how Checkmarx/ Force.com Security Source Scanner will be performing code review Is code review happening within Salesforce servers or code get ported to …
Second order SOQl/SOSL injection error during checkmarx scan
May 7, 2021 · apex soql dynamic-soql checkmarx soql-injection See similar questions with these tags.
Newest 'checkmarx' Questions - Salesforce Stack Exchange
Sep 12, 2024 · Q&A for Salesforce administrators, implementation experts, developers and anybody in-between
checkmarx - DML Statements Inside Loops Issue in Salesforce Apex …
May 28, 2024 · While performing a Checkmarx scan on our Salesforce Apex codebase, an issue was reported under the category "DML Statements Inside Loops." Provided lot of lines of code as shown …
lightning aura components - Salesforce Stack Exchange
Mar 16, 2021 · Checkmarx is correctly warning you that this is a dangerous operation since someone could craft the content of the SVG element to include some form of hack. What you need to do is …