Security
Severity
Medium
Org Config
SF-0165
Increased vulnerability to cross-site scripting attacks.
Enable this setting. From Setup, enter “Session Settings” in the Quick Find box, then select Session Settings. Then enable “XSS protection”.
30 min
This rule is linked to Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).