Results for “soql-injection”

Enforces bulk-safety rules, sharing model requirements, CRUD/FLS security, SOQL injection prevention, PNB test coverage, and modern Apex idioms for Salesforce development.

Configures Salesforce scoping rules to set a default filtered view of records in list views, reports, and SOQL without removing user access.

Performs comprehensive SQL code review across all major databases, analyzing security, performance, maintainability, and anti-patterns.

JNDI injection playbook. Use when Java applications perform JNDI lookups with attacker-controlled names, especially via Log4j2, Spring, or any code path reaching InitialContext.lookup().

SKILL.md — 硅基生命训练学·索引技能

Documents MariaDB-specific INSERT syntax and behavior, including RETURNING, ON DUPLICATE KEY UPDATE, INSERT IGNORE, and various forms and modifiers, to help write and review INSERT statements.

Builds and reviews Apex code that constructs SOQL/SOSL at runtime, inspects schema metadata, and accesses fields dynamically, with guidance on injection prevention and FLS enforcement.

Generates and reviews MariaDB CREATE SEQUENCE statements with version-specific syntax, defaults, and gotchas.

Designs bulk-safe, limit-aware Apex transactions to prevent Salesforce governor limit errors, covering SOQL, DML, CPU, heap, and async patterns.

Detect and exploit Server-Side Template Injection vulnerabilities across multiple template engines including Jinja2, Twig, Freemarker, and Velocity, with payloads for sandbox escape and remote code execution. Includes detection methodology, bypass techniques, and fix patterns.