-
What security benefits does Lightning LockerService provide in Salesforce?
What security benefits does Lightning LockerService provide in Salesforce?
-
2 Replies
-
Hi Anjali,
Lightning LockerService enforces security into Single Page Applications built using Lightning components. Locker uses browser CSP (Content Security Policy) to prevent a web page against cross-site scripting (XSS), clickjacking and other code injection attacks resulting from execution of malicious content in the trusted web page context.
In addition to prevention against vulnerabilities, Locker provides two key functions: namespacing your components (similar to Apex namespacing) and isolating component Javascript to only interact with your own component. This allows the secure co-existence of components from multiple vendors on the same web page and ISV’s to build components to publish on the AppExchange.
Thanks.
-
At a high level, Lightning Locker uses various technologies and techniques that are intended to do the following:
Prevent:
Components from causing XSS and similar security issues
Components from reading other component’s rendered data without any restrictions
Components from calling undocumented/private APIs
Enable:Cool new features like client-side API versioning similar to REST API versioning*
Faster security review
Better and more secure JS development practices
Running 3rd party JS frameworks like React, Angular and so on*
Easily adding or removing new security features and policies
Log In to reply.
Popular Salesforce Blogs
Learn About All the Types of Flows in Salesforce and its Uses
In conjunction with workflow and process builder, Salesforce Flow is a powerful automation tool for creating updating or automating any number of tasks. A flow…
Read this before you choose your Salesforce Consultant
So, you’ve decided on Salesforce, the World’s #1 CRM as your preferred Cloud computing platform, which is a great choice! Salesforce is one of most comprehensive CRM…
How Do Artificial Intelligence Systems Compare Salesforce Records?
When you compare two Salesforce records, side-by-side, you can easily determine whether or not they are duplicates. However, even if you have a small number…
Popular Salesforce Videos
Salesforce Vaccine Management | Salesforce Vaccine Cloud
Leveraging technology to manage vaccines has become increasingly important. Salesforce is investing in the public sector to aid the efforts to combat the spread of…
Security for Salesforce Developers: Data Security
In this series, we review the most important concepts that developers must understand to create secure applications on the Salesforce platform. We talk about data…
How to Set Up Web Chat in Salesforce Service Cloud SFDC - Learn Salesforce Series with Algoworks
In this video, you will get to know what the webchat feature in Salesforce Service Cloud is all about. Learn how to - 1. Introduction…
