Dear ,
I have an apex application that working well and all functionality working fine also ,security team at my company raised an SQL injection risk issue regarding this application .
This issue raised at any DML action done through this application .
This issue can be reproduce by use any incept proxy (ex. Burp suite) and once I make any change and perform submit action during that I can incept the data and make any change I want before re-forwarding it to database .
I used checksum state protection on page and session level but I still have the same issue .
Do you have any idea how I can permanently stop this risk ?
please find the attached screenshots .