---
schema_version: "1"
id: 43f74ee856cae16919418252972e8cb40f1eb97809c4def4ec3e4d7af2c7ebeb
title: Validate Aura Component Public API (secure-component)
collection: developer
version: current
locale: en-us
portal_url: https://docs.salesforce.com/developer/current/en-us/platform/aura-platform/guides/aura/cli/cli-rules-secure-component.md
canonical_url: https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-secure-component.html
source_site: developer.salesforce.com
content_type: documentation
content_hash: 260c69074d159857d3c5cd55df765ff3dc710c198272bff83b7579a5580a103a
products:
  - Lightning Aura Components Developer Guide
  - Platform Developer Content
---

# Validate Aura Component Public API (secure-component)

This rule validates that only public, supported framework API functions and properties are used.

When Lightning Locker is enabled, the framework prevents the use of unsupported API objects or calls. That means your Aura components code is allowed to use:

- Features built into JavaScript (“intrinsic” features)
- Published, supported features built into the Aura Components programming model.
- Published, supported features built into Lightning Locker _SecureObject_ objects

Prior to Lightning Locker, when you created or obtained a reference to a component, you could call any function and access any property available on that component, even if it wasn’t public. When Lightning Locker is enabled, components are “wrapped” by a new SecureComponent object, which controls access to the component and its functions and properties. SecureComponent restricts you to using only the published, supported [Component API](https://developer.salesforce.com/docs/platform/aura-platform/ref-jsapi/ref-jsapi-component.md).

**See Also**

- [Validate Aura API (aura-api)](https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-aura-api.md)
- [Validate Secure Document Public API (secure-document)](https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-secure-document.md)
- [Validate Secure Window Public API (secure-window)](https://developer.salesforce.com/docs/platform/aura-platform/guide/cli-rules-secure-window.md)