As per Salesforce, customers are responsible for the security vulnerabilities introduced by the Custom development. Since we have multiple customization options in Salesforce, which include - Flows, Apex, Lightning Components, Visualforce - each of these is vulnerable to different types of security threats - which can be - Authorization/Access Bypass, External Attacks, Storing sensitive information, SOQL injection, Cross-site scripting, etc.

In this session let us see some Code Demo which can produce the above-mentioned vulnerabilities, their impact on your Application security, and different options/solutions to prevent them. We can also discuss some tools available to detect these security threats during the development and deployment phase.