-
What security benefits does Lightning LockerService provide in Salesforce?
What security benefits does Lightning LockerService provide in Salesforce?
-
2 Replies
-
Hi Anjali,
Lightning LockerService enforces security into Single Page Applications built using Lightning components. Locker uses browser CSP (Content Security Policy) to prevent a web page against cross-site scripting (XSS), clickjacking and other code injection attacks resulting from execution of malicious content in the trusted web page context.
In addition to prevention against vulnerabilities, Locker provides two key functions: namespacing your components (similar to Apex namespacing) and isolating component Javascript to only interact with your own component. This allows the secure co-existence of components from multiple vendors on the same web page and ISV’s to build components to publish on the AppExchange.
Thanks.
-
At a high level, Lightning Locker uses various technologies and techniques that are intended to do the following:
Prevent:
Components from causing XSS and similar security issues
Components from reading other component’s rendered data without any restrictions
Components from calling undocumented/private APIs
Enable:Cool new features like client-side API versioning similar to REST API versioning*
Faster security review
Better and more secure JS development practices
Running 3rd party JS frameworks like React, Angular and so on*
Easily adding or removing new security features and policies
Log In to reply.
Popular Salesforce Blogs
How A Salesforce CRM Call Center Can Be Setup And Call Center Users Can Be Managed?
The third party CTI systems can be integrated seamlessly with Salesforce with the help of a Salesforce CRM Call Center. In the Salesforce console footer or…
QRCode with LWC in Salesforce
Hello Geeks, I was working on the generation of QRCode in LWC which is the new feature of Salesforce from the Spring '19 release. We…
Where is Salesforce DevOps Heading? Is it the Future, and if so How?
Salesforce DevOps is distinct. It enables efficiency and collaboration among shareholders that some other platforms just cannot provide. It’s not as if DevOps is extremely different from…
Popular Salesforce Videos
What Is Salesforce Data Cloud & How It Works ?
As a business, it’s hard to get all the data in a single place and make informed business decisions. And this is where Salesforce Data…
Salesforce Financial Services Cloud Spring '23 Highlights
Shake off those winter blues with the new features coming in Salesforce's Spring '23 Release for Financial Services Cloud. Whether it's ARC enhancements, interaction summary…
CPQ B2B Commerce Cloud Connector | Salesforce Tutorial
In these difficult economic times, businesses are looking for ways to improve efficiency and reduce the cost of doing business. More than ever, efficiency and…