by Martin Pradny 

Using JAX-RS inside NSF  

By Martin Pradny | 11/2/17, 4:12 AM | - | Added by Oliver Busse

Last week Christian Güdemann published new release of SmartNSF on OpenNTF that contains cool new feature that Christian tweeted before. With new CUSTOM strategy it allows direct execution of Java code from REST API defined in router configuration. It's even better than it sounds as it initializes facesContext and XPages application if needed, so even access to beans works.

XPages ${} risk of code injection possible workaround  

By Martin Pradny | 8/15/16, 4:31 AM | - | Added by John Oldenburger

I wasn't happy with findings in my previous post, because it can lead to security issues, but also can have performance hit when you actually need dynamic evaluation of injected code (I use it for app localization and few other use cases). After some digging I came to conclusion that it can't be easily changed/overridden.

XPages ${} risk of code injection  

By Martin Pradny | 8/12/16, 2:50 PM | - | Added by Oliver Busse

While working on app optimization I experimented a bit more with 'Compute on page load' vs. 'Compute dynamically' behavior. There have been several discussions in past about possible combination of ${} and #{}, for example posts from Marky Roden, Sven Hasselbach and Paul Withers . What struck me today was risk of code injection.

XPagesPreloadDB more evil than good  

By Martin Pradny | 8/2/16, 10:15 AM | - | Added by Oliver Busse

While doing optimization of application load time I found that XPagesPreloadDB notes.ini parameter didn't work in way I expected. With quick google search I realized that I'm not the first one to hit this problem as John Dalgaard wrote about the issue few years ago.

XPages and Java security troubles  

By Martin Pradny | 5/25/15, 3:35 AM | - | Added by John Oldenburger

This is more a rant than classic post, but I hope it may help someone or someone could prove me wrong, which would be even better. In recent app I use XPages Scaffolding from Jesse Gallagher. He does some magic in his code that relies on Java reflection to access classes that you can define in your NSF as your model.

Let the machines do their work and have a good sleep  

By Martin Pradny | 4/20/15, 4:16 AM | - | Added by Oliver Busse

Last month I had opportunity to speak at ICS.UG user group together with Martin Jinoch. It was great event as I mentioned in previous post. Our slides are available on ICS.UG session list, but I also want to publish demo video and GIT repository that I used for the demo.

Fun with POI4XPages and Maven  

By Martin Pradny | 1/15/15, 4:50 PM | - | Added by Oliver Busse

It's been long since I wrote my last post. For part of that period I completely left world of Domino and XPages. During that time also many interesting XPages technologies and project appeared or got more popular. One of them is build automation using Maven, so my plan for holidays was to check recent posts from Christian and Jesse about mavenization of XPages libraries.

Testing your Java code in XPages (part 1)  

By Martin Pradny | 4/15/14, 6:05 AM | - | Added by Oliver Busse

This topic will lead to a series of articles. It depends how deep I will get, but I will try to stay as much general as possible and avoid solutions that work just in my current case.

More Gradle goodness for Domino  

By Martin Pradny | 3/23/14, 4:38 AM | - | Added by Oliver Busse

I created new release of plugin for integration of headless Domino Designer into Gradle builds. Biggest changes are: Rename to Gradle Domino Plugin (most projects around are named after Domino not Notes, so I wanted to keep it aligned), Added basic error checking and output from HEADLESS.log, Task for NSF copying build-in tasks in plugin for building nsf and copying to server. All changes follow Gradle convention over configuration paradigm, so usage is now even easier.

Build XPages app from Git with Jenkins  

By Martin Pradny | 3/8/14, 5:48 AM | - | Added by Martin Pradny

Since introduction of Headless designer tech-preview in Domino Designer 9.0.1 many people started to think about build automation. Now is time to try it with Jenkins - popular free build automation server.

How to get Domino database from on disk project to server in a batch file  

By Martin Pradny | 2/7/14, 1:18 AM | - | Added by Per Henrik Lausten

Martin Jinoch wrote an article about parameters required for headless designer I did some experiments how to get the db to a server. Here are first thoughts