featured

Code-Scanning Tools for Salesforce ISVs

As an Independent Software Vendor (ISV) building apps on the Salesforce platform, ensuring the security and health of your package code is critical.

Read More

Protecting Your Salesforce ISV Package from SOQL Injection Attacks

As a Salesforce ISV, you need to be aware of the risk of SOQL injection attacks. This type of injection attack allows attackers to execute malicious SOQL statements in your ISV package, potentially bypassing your application’s security measures and gaining access to sensitive data.

Read More

Understanding Async Code Vulnerability

The Aura framework powers the Lightning Components architecture, which allows developers to create responsive and dynamic web applications using the Lightning Experience interface. However, one potential vulnerability in Aura is its handling of asynchronous code.

Read More

Preventing Cross-Site Scripting (XSS) Vulnerabilities with Safe href and src URLs

Cross-site scripting (XSS) is a significant security vulnerability that occurs when attackers inject malicious scripts into web pages viewed by other users.

Read More

Preventing XSS Vulnerability in Lightning Component innerHTML

Cross-Site Scripting (XSS) vulnerabilities are one of the most common types of security issues that web applications face today. In this blog post, we will discuss the XSS vulnerability that arises from using the innerHTML function and the measures you can take to prevent it.

Read More