Checklist progress
0/194Learned
Platform Developer
Study Checklist
Checklist progress
0/194Learned
Given a scenario, prevent user interface and data access security vulnerabilities.
0/11
CRUD and FLS enforcement in Apex
Learn this conceptwith sharing versus without sharing on UI Apex
Learn this conceptLightning Data Service versus Apex for data access security
Learn this conceptVisualforce standard versus custom controller data access
Learn this conceptCRUD and FLS checks in Visualforce expressions
Learn this conceptSOQL injection prevention in dynamic queries
Learn this conceptVisualforce output encoding against XSS
Learn this conceptLightning component XSS and Locker protections
Learn this conceptCross-site request forgery protections in Visualforce and Lightning
Learn this conceptInsecure direct object references in UI controllers
Learn this conceptFlow system context and data access risks
Learn this conceptGiven a scenario, display and use custom user interface components, including Lightning components, Flow, and Visualforce.
0/15
Describe the use cases and best practices for Lightning Web Components, including the framework, benefits, and events.
0/13
Given a scenario, implement Apex to work with various types of page components, including Lightning components, Flow, and Agentforce.
0/5
Prepare for the Exam
Study Community
Ask questions and get the latest info from other Platform Developer studiers. 593 members and growing.
Visualforce pages get their data and actions from a controller. A standard controller reuses the same logic as a Salesforce record page and already applies the current user's object permissions, field-level security, and sharing. A custom controller is Apex you write for the page; it runs in system mode, so it ignores those permissions and field-level security unless you enforce them in code, though with sharing can still apply the user's record sharing.