Questions tagged [zap-scanner]
The zap-scanner tag has no usage guidance.
11 questions
1
vote
0
answers
78
views
ZAP Scan: Apex callout to our backend API
I am in the process of preparing materials for our security review submission. I have a case where our Apex code calls out to our backend API:
Directly from Apex code
Background job: Schedule, ...
- 115
1
vote
1
answer
200
views
Question about Endpoint scanning (ZAP) for security review
As part of the Salesforce security review they state:
If your solution connects to any non-Salesforce domains, also run Chimera, ZAP, or Burp Suite on the external endpoints. Include reports from your ...
- 67
1
vote
1
answer
175
views
Security Review: Cloud Service uses and stores OAuth tokens
My customer runs a Cloud Service for many years, that connects with Salesforce orgs via OAuth flow and stores org tokens in its database.
As this service wasn't on the AppExchange my customer did not ...
- 38.2k
-2
votes
1
answer
748
views
Security Scanner Report in Owasp zap
How to scan my salesforce app in Owasap zap, need to cover everything such as custom objects, flow, process builder, reports and dashboard, etc. at the end need to generate a report, is possible?
- 13
8
votes
2
answers
5k
views
How to OWASP ZAP scan external REST API using OAuth2
I have built a Managed Package that talks to an external REST API using OAuth2 Named Credentials. I now want to submit this app for Security Review. I can't use the Chimera Scanner as it would require ...
- 38.2k
0
votes
1
answer
301
views
How to save webhooks page data to Salesforce custom object?
In my requirement my webhook url having some data. when i am updating or inserting some data in my webhook page i want to save those data automatically in salesforce custom objects.
Is there a way to ...
- 439
1
vote
0
answers
37
views
Is there a way to scan a document directly using a vf page or a button script?
I want to scan document without installing any desktop applications or salesforce packages, and to save that directly scanned document as an attachment in an object.
Is there a way to do this?
- 11
1
vote
1
answer
200
views
Scan report for custom REST service for security review. Is that mandatory?
We are about to submit our app for the security review process. I have created two REST resources in Salesforce and they are accessed from SAP system. SAP will send JSON i/p to Salesforce using that ...
- 6,878
3
votes
0
answers
126
views
Burp Scanner-License Issue. Experts suggestions please
We are planning to submit our app in AppExchange. We have succeeded in generating ZAP but we were also asked to submit BURP Scanner report. But the issue with Burp is that, the professional edition ...
- 1,456
4
votes
1
answer
152
views
ZAP Scanner Issue [duplicate]
We are currently using a Web service Secured URL for SAP using two way SSL with Authentication based on User Name and Password
Scanning the above URL directly in URL to attack it results in ...
- 1,456
0
votes
0
answers
54
views
Security Review-Requirements [closed]
We submitted for security review yesterday,and they have sent a mail saying few reports are not being uploaded like ZAP and also few Composite piece(s) of your application was not accessible
What ...
- 1,456