Although Salesforce B2B Commerce and Salesforce recommend against using
'without sharing classes' whenever possible, sometimes it is unavoidable. Which three items will open up a major security hole? (3 answers)

Question

Although Salesforce B2B Commerce and Salesforce recommend against using

'without sharing classes' whenever possible, sometimes it is unavoidable. Which three items will open up a major security hole? (3 answers)

Steve Parnell · Accepted Answer

Executing dynamic SOQL inside a without sharing class with a bind variable fromPageReference.getParameters().

Steve Parnell · Accepted Answer

Executing dynamic SOQL inside a without sharing class with a bind variable fromPageReference.getCookies().

Steve Parnell · Accepted Answer

Executing dynamic SOQL inside a without sharing class with a bind variable fromcc_RemoteActionContentex class.

Steve Parnell · Answer

Executing dynamic SOQL inside a without sharing class with a bind variable from theUserInfo class.

Steve Parnell · Answer

Executing dynamic SOQL inside a without sharing class with a bind variable fromccAPI.CURRENT_VERSION.

List of questions