logo

Software and Data Integrity Failures

Software and data integrity failures occur when an application fails to properly validate and protect the integrity of data throughout its lifecycle. This can include failure to detect unauthorized changes to data, improper handling of input data, or lack of sufficient data validation.

Anti-patterns

Improper script loading

Salesforce recommends including any additional JavaScript files by using static resources. Importing scripts differently, for example, loading them from a CDN, is discouraged for performance and security reasons.
View anti-pattern

Inefficient JavaScript loading

Salesforce recommends including any additional JavaScript files by using static resources. Importing scripts differently, for example, loading them from a CDN, is discouraged for performance and security reasons.
View anti-pattern

Insecure contents

Requesting resources using the insecure HTTP protocol weakens the security of the entire page, as these requests are vulnerable to man-in-the-middle attacks, where an attacker eavesdrops on a network connection and views or modifies the communication between two parties.
View anti-pattern

Insecure reference to external resources

Subresource Integrity (SRI) is a security feature that enables browsers to verify that the resources they fetch (for example, from a CDN) are delivered without unexpected manipulation. It works by allowing you to provide a cryptographic hash that a fetched resource must match.
View anti-pattern