Skip to main content

DAY 14 : Lightning Experience Basics and Development

 

 

WELCOME TO DAY 14

Day 14 target:

  •  Lightning Experience Basic
  • Lightning Experience Development
Estimated time required: 2 hour 15 min + t

where t is the time required for more understanding.

Remember: This is a programming part. You will be able to do it. Go slow. Take time. 

Here you go:

 

 

If completed, you can mail me at guide2salesforce@gmail.com to let me know or ask any doubt. I will try to find an answer or will direct you a reliable source.

Congratulations you are almost done!!

Sit back, enjoy or complete other errands you have to do. We will meet on Day 15 to continue. It;s the last day!!



 


 

Comments

Popular posts from this blog

Cross-Site Request Forgery (CSRF)

CSRF occurs when an attacker's webpage contains URL that performs action on website. Suppose the user is logged into a webpage and they visit an attacker's webpage simultaneously, the URL is retrieved by the attacker and actions are performed. (Hence it is advisable to log out first before opening other websites.) In Lightning platform, Salesforce has implemented an anti-CSRF token to prevent this attack. It uses tokens for authentication. Suggestions for best practices:  Add a confirmation page/pop up before action. Shorten the idle session timeout. Logout of active session and not use browser to visit other sites while authenticated. In Salesforce, built-in defence against CSRF is present. If user is logged in on one tab and attempts in another, they will see this error: "The page you submitted was invalid for your session." However, users can log in by refreshing the login page or attempting to log in a second time.

SOQL Injection

SOQL injection attack occurs when a user inputs a value in dynamic SOQL query. If that input is not validated, the command(input) can modify the SOQL statement. Best practices to avoid SOQL injection attack: Avoid using dynamic SOQL queries. Use static queries and binding variables. In case of dynamic SOQL queries, use escapeSingleQuotes method to sanitize the user-supplied input.

Event Monitoring

Event monitoring is used to keep track of logins, logoutw, web clicks, API calls, VF page loads, apex executions and reporte exports. All these events are stored in event log files. Each org's event log files are stored in API object called EventLog File.