python (65.2k questions)

javascript (44.3k questions)

reactjs (22.7k questions)

java (20.8k questions)

c# (17.4k questions)

html (16.3k questions)

r (13.7k questions)

android (13k questions)

Questions - checkmarx

Potential clickjacking on legacy browsers issue while running checkmarx on angular 13 project

Potential clickjacking issue is reported while running checkmarx report on angular 13 project. The issue is reported for app.component.html even if I try fixing this issue using frame busting scripts ...
test-img

phoenix

javascript

security

checkmarx

angular13

clickjacking

Votes: 0

Answers: 2

Latest Answer

//if WebApp is under a Clickjacking attack if(window. self === window.top) { //main File } else{ <div> If you see this page,is under Clickjacking security attack. </div> } Also ...
test-img

Priyanga Manivelan

XSS Vulnerabilities Checkmarx In REST API MultiValueMap

Checkmarx is giving XSS vulnerability for following method in my Controller class. Specifically: This element’s value (MultiValueMap<String, String> headers) then flows through the code without ...
test-img

Champ-Java

java

spring-boot

spring-security

checkmarx

Votes: 0

Answers: 0

KICS Checkmarx with Azure Pipeline

I'm planning to use KICS by Checkmarx to scan the Terraform Infrastructure Code. This is the example I got online https://docs.kics.io/1.3.1/integrations_azurepipelines/#integrate_kics_with_azure_pipe...
test-img

Unknown Coder

azure

terraform

azure-pipelines-release-pipeline

infrastructure-as-code

checkmarx

Votes: 0

Answers: 1

Latest Answer

You are looking at a very outdated version of the documentation. Here is the link to Azure DevOps Integration of the latest version: https://docs.kics.io/latest/integrations_azurepipelines/
test-img

yaloner

Unsafe object binding checkmarx spring boot application

I'm getting this alert from checkmarx, saying that i have an unsafe object binding when trying to save a comment. I've read that we mustn't save objects directly from the requestBody as it can be dang...
test-img

M.Nizar

java

spring-boot

security

checkmarx

Votes: 0

Answers: 1

Latest Answer

When using the default deserializer to deserialize the request.body into CommentDTO, the content can describe a custom class (extending CommentDTO) that when instantiated - may perform any action (som...
test-img

S Shahar

Posts

Questions

Blogs

Jobs