Clarification on XSS encoding

It is vulnerable to put merge filed inside a VF page like this without encoding,

{!sampleMergeField5}

or do we have to put encong like below?

{!HTMLENCODE(sampleMergeField5)}

7 réponses

Developer Forums User (Inactive) (Salesforce Developer Forums)
19 oct. 2023, 19:41
Certainly! Here's a social media description you can use for your WhatsApp Display Picture (DP):
"Embracing life one chat at a time! 📱💬 ⌗ChattingVibes ⌗WhatsApp DP (https://dpimages.site/)"
Feel free to customize it to make it more personal or add any relevant emojis or hashtags that reflect your personality and interests.

Ajouter un commentaire

0/9000

Visualforce