I have developed a managed package which is using public API's for providing functionality. I have gone through CheckMarx source code scanner and got report as "you do not have any security issues". I searched on google but not able to find any other security source code scanner..here are my questions related to scenario discussed
- Do i need to use 'BURP' scanner for 'PUBLIC API'?
info. about my public API:-
They are totally transparent i.e they does not store the
information..this endpoint directly hits the server and give response..this response is appended in related objects.
- can you suggest me other tool to scan my apex code?
- After adding my endpoints to managed package are they visible to user in their Remote Site Settings after installing my app?
- I am adding custom onclick java buttons to list view of Leads,Accounts and Contacts. So user installing app need to add these buttons from respective search Layouts or can i assign a default layout to user which seems not possible as per my knowledge..i will be happy for improving my knowledge.
Thanks for giving your time and sharing knowledge in advance