Book Image

Salesforce CRM - The Definitive Admin Handbook - Fourth Edition

Book Image

Salesforce CRM - The Definitive Admin Handbook - Fourth Edition

Overview of this book

Salesforce CRM’s Winter ’17 release offers a host of new features for CRM designed to transform your sales and marketing requirements. With this comprehensive guide to implementing Salesforce CRM, administrators of all levels can easily acquire deep knowledge of the platform. The book begins by guiding you through setting up users and the security settings and then progresses to configuration, data management, and data analytics. We swiftly move on to the setting up of organization wide features that affect the look and feel of the application. Process automation and approval mechanisms are covered next, along with the functional areas of Sales Cloud, Service Cloud, Marketing Cloud, and Salesforce Chatter. This book details Salesforce CRM system administration in a practical way and is an invaluable reference for both new administrators and experienced professionals. At the end of the book, techniques to further enhance the system and improve the return on investment Salesforce mobile apps and mobile administration are covered, along with Salesforce Adoption Manager. Every chapter is complete with a section containing example questions of the type that you might encounter in the certification examination.
Table of Contents (18 chapters)
Salesforce CRM - The Definitive Admin Handbook - Fourth Edition
Credits
About the Author
Acknowledgments
About the Reviewer
www.PacktPub.com
Preface

Cross-Site Request Forgery (CSRF) protection


Cross-Site Request Forgery (CSRF) is a malicious technique in which unauthorized commands are crafted (by script or a link on a page, for example) to be sent by a user to a website that has been authenticated.

These options protect against Cross-Site Request Forgery (CSRF) attacks by modifying the non-setup pages to include a random string of characters in the URL parameters or as a hidden embedded field. The system then verifies this string of characters and only executes the command if the value matches the expected value. There are various features for setting protection against CSRF attacks as per the following sections:

Enable CSRF protection on GET requests on non-setup pages

The Enable CSRF protection on GET requests on non-setup pages option protects against CSRF attacks on GET requests on non-setup pages.

This option is enabled by default and can only be disabled by request to Salesforce.com support.

Enable CSRF protection on POST requests...