Allow CSRF Protection on GET Requests to Visualforce Pages To Be Enforced

Status – Tested

Block Execution of JavaScript in the HYPERLINK Function To Be Enforced

Status – Tested

Add Clickjack Protection for Legacy Browsers to Visualforce Pages Without Page Header

Status – Tested

POST Method for runTestsSynchronous Requires View Setup Permission

Status – Tested

Stop Automated Field Updates from Suppressing Email Notifications

Status – Awaiting Test

Disable Access to Non-global Apex Controller Methods in Managed Package

Status – Awaiting Test

Trust Percent Values in Flow sObject Variables Again” Critical Update Activates in Spring ’17

Status – Tested

Turn Off Masking for Encrypted Data

Status – Tested

LockerService Has Stricter Content Security Policy

Status – Tested

PageReference getContent() and getContentAsPDF() Methods Now Behave as Callouts

Status – Tested