Cross-Site Request Forgery (CSRF) Protection On GET Requests On Non-Setup Pages Is Disabled

Impact Area

Security

Severity

Medium

Affected Element

Org Config

Rule ID #

SF-0157

Impact #

Increased vulnerability to Cross-Site Request Forgery (CSRF) attacks.

Remediation #

Enable this setting as described in this Salesforce knowledgebase article.

Time to fix #

30 min

References #

This rule is linked to Common Weakness Enumeration CWE-352 Cross-Site Request Forgery (CSRF).

Was it helpful ?
Table of contents

THE AI CODE GOVERNANCE BRIEF

Sign up for new updates!
ServiceNow
Salesforce