0

I am planning to publish an app on AppEXchange but we have used API(Google Contact Api - Rest API). Should we have to go through web app scanner results.

0

You would need BURP scanning if your application makes callout to external websites. You can find potential question answered here.

This is very good blog post written by Daniel on same topic.

| improve this answer | |
0

Salesforce no longer provides licenses to BURP. Instead ZAP is the preferred tool. It should be used for testing and the results submitted. More information is hwere - http://security.force.com/security/tools/webapp/zapbrowsersetup

| improve this answer | |
  • How to test RestAPi on zap. Can you please provide instructions on how to do it ? – Piyush May 20 '15 at 8:08

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.