In Salesforce we are using a lots of custom user interfaces. That’s why we should be aware about various types of security vulnerabilities. The most common you can find here: SOQL injection, Cross-Site Scripting (XSS), Cross-Site Request Forgery (CSRF). Let's discuss each of them briefly. SOQL injection From definition SQL injection can happen when we have insecure construction of database queries with user-supplied data e.g.: queries are built directly with user data inlined, queries are concatenated directly with the query text (not type-safe bind parameters). When designing SOQL queries there are basically three places where behavior of the query can be based on input from User: Behaviors of the WHERE clause to change the set of returned records. Selecting fields from ...
Comments
Post a Comment