-
My app was rejected by Salesforce Review with error related to JavaScript.
I sent a small managed packaged app for review in Salesforce Appexchange. However my app was flagged by SFDC Security Review team. The gist of their concern was
“JavaScript of any type is not allowed to run within the Salesforce.com application context. This includes JavaScript blocks within HomePageComponents, WebLinks, and all other components that are run under the Salesforce.com DOM.”The culprit, I think, are short javascript code that we used for weblinks on some buttons. For example we have a button for fetching info of selected records through GETRECORDIDS() , preparing a redirect URL, and open a VF page.
Anyway to get around the problem and get the app listed on AppExchange?
-
1 Reply
-
Though it is not mentioned anywhere explicitly, the managed packaged apps are first tested by automated scripts from Salesforce.com side, and once found, they flag JS code as possible Cross-Site Scripting vulnerability.
Custom Javascript code is always vulnerable to ‘Code Injections’ and are therefore considered a security risk by SFDC. Checkout this post to understand more
https://developer.salesforce.com/page/Secure_Coding_Cross_Site_ScriptingThe problem has a twofold solution. First you have to make sure that you are using proper encoding functions around your JS codes
``Once you have done that, you can request re-review of your app. You would have to convince the review team that your app was flagged a false positive and is not vulnerable.
Log In to reply.
Popular Salesforce Blogs
What are Salesforce Big Objects? | The Developer Guide
We are all aware that Salesforce objects are used to manage and tinker with our data. Standard objects, custom objects, and external objects are likely…
A Trip to the World of Salesforce Einstein Analytics
Hello Everyone, Welcome to the World of Analytics. Here we begins a trip to the world of Analytics. What's about Analytics? In the glowing era…
Salesforce Features That Help Nonprofits Boost Engagement
As we’ve already discussed how important Salesforce is for startups, it’s time to explore how useful it can be outside the realm of business. With…
Popular Salesforce Videos
How to Learn Salesforce Fast? Explained.
How to learn Salesforce in six months and get your first job in the industry. Learning Salesforce these days is challenging because the platform is…
Create Your First Salesforce App in 30 Minutes
In this session, we will design, build and deploy a Salesforce App in 30 minutes using the low code and Salesforce modern developer tooling. Presenter…
How to create an App in Lighting Experience?
Salesforce is the trusted cloud when it comes to privacy and we are sure the Lightning will strike here thrice. As Salesforce is expanding, new…
