Lightning Aura Components Developer Guide

What Is the Lightning Component Framework?
Quick Start
Creating Components
Using Components
Communicating with Events
Communicating Across the DOM with Lightning Message Service
Creating Apps
Styling Apps
Developing Secure Code
Lightning Locker
Lightning Web Security
Content Security Policy Overview
Using JavaScript
Working with Salesforce Data
Testing Components with Lightning Testing Service
Debugging
Performance
Reference
PDF

Newer Version Available

This content describes an older version of this product. View Latest

Lightning Web Security

Lightning Web Security is designed to make it easier for your components to use secure coding practices. Lightning Locker has been the default security architecture for all Lightning components. Lightning Web Security (LWS) is gradually replacing Lightning Locker for Lightning web components, and LWS is in beta for Aura components too.

For detailed information on Lightning Web Security, including how to enable Lightning Web Security instead of Lightning Locker, see the Lightning Web Components Developer Guide.

The Lightning Web Components Developer Guide will be updated for Spring ’23 in February 2023 so the developer guide won’t mention Lightning Web Security for Aura (beta) until that time. Lightning Web Security for Aura (beta) is controlled by the Use Lightning Web Security for Lightning web components (GA) and Aura components (beta) setting in Session Settings in Setup. This setting was called Use Lightning Web Security for Lightning web components in Winter ’23 when it applied to Lightning Web Security for LWC only. In Spring ’23, the same setting controls LWS for LWC (GA) and LWS for Aura (beta).