Security
Medium
Org Config
SF-0163
Increased vulnerability to code injection attacks by Javascript or StyleSheet code.
Enable this setting. From Setup, enter “Session Settings” in the Quick Find box, then select Session Settings. Then enable “Content Sniffing protection”.
30 min
This rule is linked to Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’).