Learning Salesforce Lightning Application Development

Introducing Locker Service

The Lightning Locker Service enforces security in single-page applications built using Lightning Components. Locker uses a browser content security policy (CSP) to protect a web page against cross-site scripting (XSS), clickjacking, and other code injection attacks that result from the execution of malicious content in a trusted web page context.

Locker Services serve the following purposes:

• Protection against web security vulnerabilities. 
• Adding namespaces to your components, preventing component code from accessing data from other components.
• A component code only has access to the DOM that was created by your component.

The preceding factors allow for the coexistence of components from multiple vendors on ...