Gearset

 Session IDs should be treated as secrets and handled with care, as they may allow access to the Salesforce API on behalf of the running user.

 [Salesforce] <a href="https://developer.salesforce.com/docs/atlas.en-us.pages.meta/pages/pages_variables_global_api.htm" rel="nofollow noopener noreferrer" target="_blank">$Api</a>

 [CWE] <a href="https://cwe.mitre.org/data/definitions/807" rel="nofollow noopener noreferrer" target="_blank">Reliance on Untrusted Inputs in a Security Decision</a>

 [OWAS] <a href="https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/" rel="nofollow noopener noreferrer" target="_blank">Identification and Authentication Failures</a>

-  [Salesforce] <a href="https://developer.salesforce.com/docs/atlas.en-us.pages.meta/pages/pages_variables_global_api.htm" rel="nofollow noopener noreferrer" target="_blank">$Api</a>
-  [CWE] <a href="https://cwe.mitre.org/data/definitions/807" rel="nofollow noopener noreferrer" target="_blank">Reliance on Untrusted Inputs in a Security Decision</a>
-  [OWAS] <a href="https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures/" rel="nofollow noopener noreferrer" target="_blank">Identification and Authentication Failures</a>
   

Use of Session ID in Visualforce

Find answers and get help from Intercom Support and Community Experts

This site uses cookies and similar technologies ("cookies") as strictly necessary for site operation. We and our partners also would like to set additional cookies to enable site performance analytics, functionality, advertising and social media features. See our {cookiePolicyLink} for details. You can change your cookie preferences in our Cookie Settings.

Link, Press control-option-right-arrow to exit

Empty Help Center

Uh oh. That page doesn’t exist.

Disappointed

Neutral

Smiley

Thinking...

Searching through sources...

Analyzing...

Tickets submitted through the messenger or by a support agent in your conversation will appear here.

Use of Session ID in Visualforce

Rationale

Scope

Related resources