Certified Development Lifecycle and Deployment DesignerDemo

By Salesforce · Question Mode

QuestionQ82

Risk Identification and Mitigation

All AppExchange products must undergo Salesforce security reviews.

What is the most common reason prospective AppExchange products fail the security review?

  • A CRUD/FLS (field level security)
  • B SOQL injection
  • C Session hacking
  • D Cross-site scripting
Explanation

AppExchange products must enforce users’ object permissions (CRUD) and field-level security (FLS). Missing or inadequate CRUD/FLS enforcement can expose data or allow operations beyond a user’s authorized access, making it a common reason for security-review failure. Salesforce specifically identifies CRUD/FLS as an elusive issue often detected during the AppExchange Security Review.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!