Impact area

Security

Severity

Medium

Affected element

Org Config

Rule ID #

SF-0172

Impact #

Increased vulnerability to Cross-Site Request Forgery (CSRF) attacks.

Remediation #

Enable this setting. From Setup, enter “Session Settings” in the Quick Find box, then select Session Settings. Then enable “Enable Stricter Content Security Policy”.

Time to fix #

30 min

References #

This rule is linked to CWE-1021: Improper Restriction of Rendered UI Layers or Frames.