Help & Support
Elevate Your Agents with AgentExchange Solutions
Easily enhance Agentforce with pre-built AI solutions from AgentExchange. Browse, install, and deploy agents, actions, and apps directly into your environment. Tell Me More
Have Questions?
Private ListingThis listing is private and can't be found by searching or browsing AppExchange.
ESAPI Library
Force.com implementation of the ESAPI library
- Business Need
- Admin & Developer Tools
- Requires
- Sales Cloud
The Force.com ESAPI (The OWASP Enterprise Security API) library is designed to make it easier for programmers to retrofit security into existing applications or build a solid foundation for new development.
Rating
Reputation
MVP
Recognized by Salesforce for their leadership, expertise, and generosity
Top Reviewer
Contribute reviews that encourage conversation and help others make informed decisions
Ranger
Lifelong learners who have earned the Ranger rank or higher on Trailhead
Showing 4 of 4 Reviews
Worthless, it's API 29.0 which is deprecated.
This package is ancient history. It should be brought up to date or deleted.
Apex PMD not clearing CRUD violations using esapi methods
I tried installing the package and used it for checking FLS CRUD.However, the Apex PMD is not clearing out the CRUD Violations, I can see in the PMD documentation that it supports ESAPI library. Please advise further
Easy to use
I just installed the managed package and it was ready to be used in the code. PMD also cleared the code of security vulnerabilities. One observation though, which I have described below. Example when it works: ContactSOQL= contactSOQL + ' and AccountId = \'' + owasp.ESAPI.encoder().SFDC_HTMLENCODE(relatedContactAccountId) + '\' limit 20'; where relatedContactAccountId =Apexpages.currentPage().getParameters().get('AccountId'); Example when it does not work: relatedContactAccountId =owasp.ESAPI.encoder().SFDC_HTMLENCODE(Apexpages.currentPage().getParameters().get('AccountId')); Isn't it cumbersome to key in the whole method name everytime I use the querystring variable? Any suggestions?
Good and easy to use
I used it in my code and found really good. This helps in ApexPMD errors checklist and ensure good security during DML operations
Cherisse Taylor
11/01/2017
Did you use the managed package, or did you have to download the inidivdual ESAPI code to your org? I have tried with the managed package, however, I receive errors. The only way I'm able to use is by importing all of the classes manually from github.
Nevermind, I figured it out.