Code Analyzer Scan (Learning)
FieloELR v1.109.1 scanned on 28 September 2026
Fielo conducts an internal security review on every major release using the Salesforce Code Analyzer.
The process goes like this: the scan identifies potential vulnerabilities and for each one, we either address the issue, document it as a false positive, or, when the flagged code is not part of the packaged product, ignore it.
Results
FieloELR contains 179 Apex classes across 13 custom objects.
All of them were scanned for security. Here is the final report:
| Rule | Issues | False Positives | Rectifications | Ignored |
|---|---|---|---|---|
| ApexSOQLInjection | 218 | 200 | 18 | – |
| AvoidCreateElementScriptLinkTag | 1 | 1 | – | – |
| LoadJavaScriptHtmlScript | 1 | 1 | – | – |
| VfUnescapeEl | 21 | 20 | 1 | – |
| LibraryWithKnownHighSeverityVulnerability | 2 | – | – | 2 (1) |
| ApexXSSFromURLParam | 14 | 14 | – | – |
| ApexSuggestUsingNamedCred | 2 | 2 | – | – |
| ApexOpenRedirect | 3 | 1 | – | 2 (1) |
| VfCsrf | 4 | 2 | – | 2 (1) |
| AvoidHardCodedCredentialsInAura | 5 | – | – | 5 (1) |
| LoadCSSApexStylesheet | 1 | – | – | 1 (1) |
| lwc/lwc/no-inner-html | 167 | 167 | – | – |
| ApexCRUDViolation | 591 | 222 | 54 | 33 (1) |
| AvoidOldSalesforceApiVersions | 1579 | – | – | 1579 (2) |
(1) Ignored because the flagged code is unpackaged and not delivered with the product.
(2) Ignored due to the impact of changing API versions across the package.
Updated 16 days ago
Did this page help you?