Skip to main content

Clayton Rules - Unsafe JavaScript

David Martin avatar
Written by David Martin
Updated over 3 weeks ago

Rationale

Using eval() and similar reflection operations presents a major security risk. These are blocked by LockerService and generally prohibited by the AppExchange Security Review. Salesforce has also announced that future Content Security Policy (CSP) settings will disallow unsafe-eval

Scope

  • Lightning controllers

See also

Did this answer your question?