<apex:repeat>

[stephenroden]

The scanner picks up <apex:repeat value="{!varname}" ...> as being a "Security-VfUnescapeEl" issue. How are we supposed to escape varname so that it's not highlighted as an issue?

[johnbelosf]

@stephenroden apologies - I missed this discussion. Have you looked at: https://developer.salesforce.com/docs/atlas.en-us.pages.meta/pages/pages_security_tips_scontrols.htm

[stephen-carter-at-sf]

Closing older discussions now that we have gone GA with code-analyzer. See https://developer.salesforce.com/docs/platform/salesforce-code-analyzer/guide/get-started.html and if you still have questions, feel free to start a new discussion.