Wednesday, April 1, 2009
Wednesday, February 11, 2009
How to avoid XSS (Cross Site Scripting) in visualforce
If you are use URL values, you must escape. Here I show escape method for apex language.
Tuesday, January 20, 2009
Visualforce
Visualforce gives customers the power to design application user interfaces for any experience on any screen. Using the powerful logic and workflow intelligence provided by the Apex programming language, Visualforce offers the flexibility to meet the requirements of applications designed for many different types of users on a variety of devices. Now you can create and deliver any user experience you can dream up.
Visualforce provides a page-based model, built on standard HTML and Web presentation technologies, and is complimented with a component library for implementing common user interface elements, and a controller model for creating new interactions between those elements. As part of the larger Force.com platform, the user experiences created in Visualforce directly leverage the data, logic, and workflow created in the other Force.com features. Visualforce features and capabilities will include:
Pages – This capability enables the design definition of an application’s user interface. Implemented using standard Web technologies including HTML, AJAX, and Flex, pages will dynamically detect devices and associate them with specific design definitions. Pages will allow customers to create any user experience with standard Web technologies that will be immediately familiar to any Web developer and give them the ability to automatically deliver the right experience to the right device.
Components – With components, you can create new applications that automatically match the look and feel of Salesforce applications or easily customize and extend the Salesforce user interface to specific customer and user requirements. Customers can rapidly create a user experience by assembling existing user interface elements. Visualforce will provide the power to reuse predefined standard Salesforce and custom-designed UI components. More than 50 standard Salesforce UI elements will be available with Visualforce.
Logic Controllers - The controller enables customers to build any user interface behavior. Customers will be able to use Visualforce to quickly create a new look and feel that leverages existing application functionality. Customers can define completely new UI interactions that benefit from all the power of the Apex programming language. The standard controller gives customers the ability to inherit and reuse any standard Salesforce UI behavior, like new, edit, and save. Customers will also have powerful custom controller capabilities to define new UI behaviors using Apex.
Visualforce provides a page-based model, built on standard HTML and Web presentation technologies, and is complimented with a component library for implementing common user interface elements, and a controller model for creating new interactions between those elements. As part of the larger Force.com platform, the user experiences created in Visualforce directly leverage the data, logic, and workflow created in the other Force.com features. Visualforce features and capabilities will include:
Pages – This capability enables the design definition of an application’s user interface. Implemented using standard Web technologies including HTML, AJAX, and Flex, pages will dynamically detect devices and associate them with specific design definitions. Pages will allow customers to create any user experience with standard Web technologies that will be immediately familiar to any Web developer and give them the ability to automatically deliver the right experience to the right device.
Components – With components, you can create new applications that automatically match the look and feel of Salesforce applications or easily customize and extend the Salesforce user interface to specific customer and user requirements. Customers can rapidly create a user experience by assembling existing user interface elements. Visualforce will provide the power to reuse predefined standard Salesforce and custom-designed UI components. More than 50 standard Salesforce UI elements will be available with Visualforce.
Logic Controllers - The controller enables customers to build any user interface behavior. Customers will be able to use Visualforce to quickly create a new look and feel that leverages existing application functionality. Customers can define completely new UI interactions that benefit from all the power of the Apex programming language. The standard controller gives customers the ability to inherit and reuse any standard Salesforce UI behavior, like new, edit, and save. Customers will also have powerful custom controller capabilities to define new UI behaviors using Apex.
What is an Apex;
Apex is a development platform for building software as a service (SaaS) applications on top of Salesforce.com's customer relationship management (CRM) functionality. Apex allows developers to access Salesforce.com's back-end database and client-server interfaces to create third-party SaaS applications. Apex includes an application program interface (API) that developers can use to access user data on Salesforce.com.
Apex applications are usually hosted and run directly from Salesforce.com's servers. No installation on a user's local PC is necessary because of this hosting. A user simply purchases a given Apex program through AppExchange, Saleforce.com's Web portal for add-ons to CRM. The user is then able to access the program through the standard interface. Once created, an application can be published for public use or kept private, for instance as a proprietary add-on.
The Apex platform consists of three tools, Builder, API and Code.
• Apex Builder is an on-demand component that allows easy, drag-and-drop customization with a limited set of features. Apex Builder applications are relatively easy to create but must draw on a limited, pre-defined set of interface elements and business logic algorithms.
• Apex API is a method of retrieving raw data from Salesforce.com's servers. The API is used by programs that are external to Salesforce.com, like Java applications, that need access to information on a client's Salesforce.com account.
• Apex Code is a fully featured programming language that is executed on Salesforce.com's servers. Apex Code has built-in methods for accessing user data. The language was made available to developers in Salesforce.com's Winter '07 edition. Apex Code offers both flexibility in developing for the Apex API while a reduction in the number of calls between server and client. While Apex API programs must communicate with the Salesforce.com server each time they access or record data, Apex Code applications handle these transactions natively, only requring client-server communication when taking user input and displaying the end result.
In April 2007, Saleforce.com announced the Salesforce.com Platform Edition. This version lets users access Apex applications without subscribing to the company's core CRM product.
Subscribe to:
Posts (Atom)
