Checklist progress
0/194Learned
Platform Developer
Study Checklist
Checklist progress
0/194Learned
Given a scenario, prevent user interface and data access security vulnerabilities.
0/11
CRUD and FLS enforcement in Apex
Learn this conceptwith sharing versus without sharing on UI Apex
Learn this conceptLightning Data Service versus Apex for data access security
Learn this conceptVisualforce standard versus custom controller data access
Learn this conceptCRUD and FLS checks in Visualforce expressions
Learn this conceptSOQL injection prevention in dynamic queries
Learn this conceptVisualforce output encoding against XSS
Learn this conceptLightning component XSS and Locker protections
Learn this conceptCross-site request forgery protections in Visualforce and Lightning
Learn this conceptInsecure direct object references in UI controllers
Learn this conceptFlow system context and data access risks
Learn this conceptGiven a scenario, display and use custom user interface components, including Lightning components, Flow, and Visualforce.
0/15
Describe the use cases and best practices for Lightning Web Components, including the framework, benefits, and events.
0/13
Given a scenario, implement Apex to work with various types of page components, including Lightning components, Flow, and Agentforce.
0/5
Prepare for the Exam
Study Community
Ask questions and get the latest info from other Platform Developer studiers. 593 members and growing.
Lightning Data Service is the recommended way for Lightning components to work with Salesforce records because it applies the running user's sharing rules, object-level permissions, and field-level security. Apex is the fallback when Lightning Data Service cannot do the work: it operates on one record at a time by record Id and cannot query collections or group several operations in one transaction. In API version 67.0 and later, Apex already runs in user mode and classes already enforce sharing, so you only drop those checks if you explicitly choose system mode or without sharing.