Salesforce Commerce Security
Implements robust security protocols and compliance standards for Salesforce B2C and B2B commerce platforms.
The sf-security skill provides a comprehensive framework for securing Salesforce Commerce environments by enforcing industry-standard protections such as SLAS OAuth 2.1, CSRF prevention, and context-aware XSS encoding. It guides developers through complex security tasks including session management, PCI DSS v4 compliance, and Role-Based Access Control (RBAC) across both ISML and Lightning Web Component (LWC) frameworks. This skill is essential for building trustworthy storefronts that protect sensitive customer data while adhering to current OWASP Top 10 guidelines and Salesforce Shield requirements.
Key Features
01Automated CSRF protection patterns for state-changing controllers and forms
0232 GitHub stars
03Context-aware XSS prevention for ISML templates and Lightning Web Components
04Granular RBAC and sharing rule configuration for Business Manager and B2B
05SLAS OAuth 2.1 implementation with PKCE for secure customer authentication
06PCI DSS compliance guidance for secure payment tokenization and log masking
Use Cases
01Securing a B2C Commerce storefront against cross-site scripting and injection attacks
02Configuring Content Security Policies (CSP) to restrict untrusted script execution
03Implementing SLAS authentication flows for headless or PWA Kit applications