Blogs

Protect Salesforce ISV packages from SOQL injection attacks with proven techniques like bind variables, escaping, blocklisting, typecasting, and allowlisting.

read more

The Aura framework powers the Lightning Components architecture, which allows developers to create responsive and dynamic web applications using the Lightning Experience interface. However, one potential vulnerability in Aura is its handling of asynchronous code.

read more

Learn how to prevent XSS attacks in URL attributes like href and src. This guide explains XSS vulnerability prevention, safe URL sanitization, and best practices to prevent XSS vulnerability in Lightning components and web apps.

read more

Cross-Site Scripting (XSS) vulnerabilities are one of the most common types of security issues that web applications face today. In this blog post, we will discuss the XSS vulnerability that arises from using the innerHTML function and the measures you can take to prevent it.

read more

If you’ve been using First-Generation Packaging (1GP) to develop packages on the Salesforce platform, it’s important to note that Second-Generation Packaging (2GP) is not just a simple upgrade to version 2.0 of 1GP. Instead, 2GP represents an entirely new and improved approach to package development, offering new ways to manage and develop apps and metadata.

read more

As an Independent Software Vendor (ISV) building apps on the Salesforce platform, ensuring the security and health of your package code is critical.

read more