-
My app was rejected by Salesforce Review with error related to JavaScript.
I sent a small managed packaged app for review in Salesforce Appexchange. However my app was flagged by SFDC Security Review team. The gist of their concern was
“JavaScript of any type is not allowed to run within the Salesforce.com application context. This includes JavaScript blocks within HomePageComponents, WebLinks, and all other components that are run under the Salesforce.com DOM.”The culprit, I think, are short javascript code that we used for weblinks on some buttons. For example we have a button for fetching info of selected records through GETRECORDIDS() , preparing a redirect URL, and open a VF page.
Anyway to get around the problem and get the app listed on AppExchange?
-
1 Reply
-
Though it is not mentioned anywhere explicitly, the managed packaged apps are first tested by automated scripts from Salesforce.com side, and once found, they flag JS code as possible Cross-Site Scripting vulnerability.
Custom Javascript code is always vulnerable to ‘Code Injections’ and are therefore considered a security risk by SFDC. Checkout this post to understand more
https://developer.salesforce.com/page/Secure_Coding_Cross_Site_ScriptingThe problem has a twofold solution. First you have to make sure that you are using proper encoding functions around your JS codes
``Once you have done that, you can request re-review of your app. You would have to convince the review team that your app was flagged a false positive and is not vulnerable.
Log In to reply.
Popular Salesforce Blogs
What is the Process Builder in Salesforce? | The Ultimate Guide
What is the Process Builder? The Process Builder is a visual tool that allows users to build complex business processes using a drag-and-drop interface. It…
Key Features of Salesforce Google Mail Integration
Salesforce Google Mail integration helps businesses manage email communication more efficiently. When you connect Google Mail with Salesforce, several useful features are unlocked that can…
9 Best Practices of Salesforce Change Management Methodology
Implementing changes in Salesforce is a strain for an organization. A good change management plan seems hard but to avoid change pain it is good…
Popular Salesforce Videos
What is a Salesforce PDO Partner?
Salesforce market is growing very fast these years. It is estimated that in 2021 the Salesforce ecosystem will be worth around 100 billion U.S. dollars.…
Build a Discount Calculator | Trailhead - Autolaunched Flow Salesforce Example
In this video, I'm creating a Discount Calculator with the help of Salesforce Flow to Automate Your Business Processes with Lightning Flow. So it's a…
Understanding Salesforce Field Service Mobile App - An Overview | AblyPro
Field Service mobile app is an all-in-one tool designed for today’s mobile workforce. Salesforce Field Service Mobile App is an innovative tool designed to help…
