Starting November 20, the site will be set to read-only.
On December 4, 2023,
Apex Code Development (90769)
General Development (55146)
Visualforce Development (37251)
Lightning (18266)
APIs and Integration (17146)
Trailhead (11680)
Formulas & Validation Rules Discussion (11337)
Other Salesforce Applications (8116)
Jobs Board (6655)
Force.com Sites & Site.com (4842)
Mobile (2694)
You need to sign in to do that
Don't have an account?
BryanTSC I am looking to list an app I developed on the appExchange. The app contains a VF component with a js library that talks to a label printer and also includes a few JS remoting calls to fetch some data from the component controller. Does this fit within the context of a web service, therefore requiring a burp scan for the app security review? It doesn't seem to me that it would, but I'm a little bit confused.
Hello Bryan,
The Burp tool must only be used to evaluate the security of your web application that resides outside of Force.com (e.g. www.partnersite.com). For applications residing completely on Force.com (e.g. partner-visual.force.com, appxpartner.force.com. etc.), please use the Force.com Source Source Scanner . So i don't think that you need a Burp scan.
Please note that you are not permitted to run this tool against any servers owned and operated by salesforce.com, without prior written approval.
For details please refer below link: http://security.force.com/security/tools/webapp/burpabout