Newer Version Available

This content describes an older version of this product. View Latest

Develop Secure Code: Lightning Locker and CSP

Lightning communities use Content Security Policy (CSP) and Lightning Locker to secure the community from malicious resources and component vulnerabilities. When you develop custom Lightning components to use in a community, or if you include inline scripts or remote resources and scripts in the community’s head markup, factor in the potential impact of these security levels.

Lightning Locker and CSP for Aura components are documented in “Developing Secure Code” in the Lightning Aura Components Developer Guide. If you’re creating Aura components, use that guide as your main point of reference for developing secure code in Aura components.

Lightning Locker and CSP for Lightning web components are documented in “Security with Lightning Locker” in the Lightning Web Components Developer Guide. If you’re creating Lightning web components, use that guide as your main point of reference.