SFCC Best Practices

Rendering Pages Best Practices Rendering Templates When Salesforce Commerce Cloud generates web pages on the application server, it uses ISML Templates and scripts within the Controllers. B2C Commerce Script API in the Controllers access the database layer if necessary. We are going to describe the best practices for: ISML Templates

Salesforce B2C Commerce Data Validation Introduction to Data Validation Validation is the process by which data is rigorously checked to ensure that it is exactly the kind of data expected by an application. Invalid requests are generally rejected outright and an error is returned to users. There are many locations

Cross-Site Scripting Defense Introduction Cross-Site Scripting, XSS, is a class of vulnerabilities that allow an attacker to inject malicious scripts, such as javascript, into a web page that gets executed on a victims browser. This can allow the attacker to compromise the browser and begin to attack the victim directly

Salesforce Commerce Cloud Data Purging Introduction The intent of this guide is to provide information on the need of data purging, data purging techniques and best practices to get the optimal response times.  The purpose of this guide is not to provide a single data purging guideline, which works for

Cross-Site Request Forgery Protection Framework Introduction Every storefront contains a number of protected requests. Authenticated users who are changing something about their accounts, or submitting personal data to a server to complete an action typically do these requests. Users have an expectation that only they will ever be making those