Does anyone have insight regarding the obvious Catch-22 Salesforce is setting up:

Enable Secure Static Resource for Lightning Components - Winter '21 (enabled) / Spring '21 (Enforced)

From the Winter '21 Release Notes (https://releasenotes.docs.salesforce.com/en-us/winter21/release-notes/rn_lc_secure_static_resources_update.htm):
"To improve security, this update serves all static resources from the visualforce domain instead of the lightning domain. This change prevents a script included in a static resource from accessing the document in the lightning domain due to the same-origin security policy."

From the Lightning Aura Components Developer Guide (https://developer.salesforce.com/docs/atlas.en-us.lightning.meta/lightning/js_libs_platform.htm):
"The framework’s content security policy mandates that external JavaScript libraries must be uploaded to Salesforce static resources. For more information on static resources, see “Static Resources” in the Salesforce online help."

Here is a Known Issue (https://trailblazer.salesforce.com/issues_view?id=a1p4V000001JipTQAS) related to the topic.

My question to this forum is:

Have you been successful in implementing external libraries with the Winter '21 update enabled? If so, are you willing to share?

Dear all,

I am new to Salesforce. I created a developer environment, and a test Connected App, so that I can test making REST API calls.
The problem is that I cannot locate the consumer key and consumer secret for my app. I have read people had similar issues in the past, but their solution didn't work for me.
I attach a screenshot of my app details. According to the docs, this is where I should see consumer key and consumer secret.



Thanks for the help!

Daniele 

Hi,
I am using a flow to allow a user to edit a record.
I can display the current value of all the fields in the record except for picklists - is there any way to do this?

Also all my picklists in the flow are mandatory - do they have to be?