Notes / Domino
New Project: OpenNTF Java SDK for HCL Domino REST API - LotusNotus Blog 
By Serdar Basegmez | 9/11/26, 5:41 AM | Development - Notes / Domino | Added by Serdar Basegmez
OpenNTF Java SDK for HCL Domino REST API — early preview simplifying Java access to Domino REST; JWT auth, async/sync API. Get it on GitHub.
Configuring A Domino OIDC Provider With One-Touch Setup
By Jesse Gallagher | 7/30/26, 2:59 PM | Development - Notes / Domino | Added by Roberto Boccadoro
HCL released Fixpack 1 for 14.5.1 the other day, and they decided to toss in a few features. While I imagine the RAG thing had a bunch of people clamoring for it and the proxy port one is a natural small feature to add, the addition to One-Touch Setup stands out a bit. It gains a new property in the configuration JSON but has a pretty-limited scope: it lets you stash a created document's UNID and use it in another doc.
I'm not sure what other use cases people have had for this, but I actually had one specific one that this surprisingly solves: configuring Domino as an OIDC Provider and registering a client
Sanitize xpages input fields
By Patrick Kwinten | 7/30/26, 7:39 AM | Development - Notes / Domino | Added by Patrick Kwintensson
In case you have xpages applications open in the web the chances are that someone, someday, somehow wants to act malicious. Of course we don't want that so besides on the infrastructure site you also should add protection on the application side. Especially applications with input fields (text, text area, radiobuttons etc) are vulnerable for exploitation. Tools like Burp suite do not make this a tedious task. So how can we protect us from malicious data-entry?
Developing Jakarta Apps Via NSF File Server, Take 2
By Jesse Gallagher | 6/23/26, 11:01 AM | Development - Notes / Domino | Added by Roberto Boccadoro
Just about a year ago today, I posted about some tinkering I was doing with the then-new support in the NSF File Server for live modifying the files in the virtual "WebContent" folder of an NSF.
With that post, I was going the route of developing a project with Maven and then SCP'ing up the build results. That worked for an initial push, but had some big caveats. For one, it took deploying the entire app with every change. The other, bigger problem was that it wouldn't delete files that were no longer part of the app, so old pages and classes would float around until you went in and deleted them.
New Release: XPages Jakarta EE 3.7.0
By Jesse Gallagher | 6/21/26, 12:02 PM | Development - Notes / Domino | Added by Roberto Boccadoro
Yesterday, I released version 3.7.0 of the XPages JEE project, which is another incremental release that improves a number of things for the apps I've been making with it, as well as just generally bumping implementation versions to keep up to date.
Creating an SBOM for a Domino application and performing a security check on it
By Patrick Kwinten | 6/8/26, 2:57 AM | Development - Notes / Domino | Added by Patrick Kwintensson
In a previous post i wrote about how to use the OWASP Vulnerability Check to scan your Domino application (rather it's ODP than the NSF) for vulnerabilities and generate a report for it. As you would expect there are more solutions for it, and HCL has it's own AI powered offering for this.
Owasp vulnerability check on a Domino application
By Patrick Kwinten | 6/4/26, 6:56 AM | Development - Notes / Domino | Added by Patrick Kwintensson
I was watching the video OWASP Top 10: The Big Picture on Pluralsight in which the OWASP Vulnerability Check (OVC) was mentioned and recommended so I wondered if this would be of interest for my applications? Whether you are just getting started, a seasoned developer, or someone who is curious about secure development the OWASP…
Make Tika on Domino v12 Save Again – Kwintessential Notes
By Patrick Kwinten | 5/26/26, 10:29 AM | Development - Notes / Domino | Added by Patrick Kwintensson
If you are still on a HCL Domino v12 server you are probably aware that you wont be able to run the latest and greatest Tika version. So what options do you have? Upgrade to the last v2 version? That would be v2.9.4 but then you still cope with some vulnerabilities in Tika core.
Replacing CKEditor with Quill – Kwintessential Notes
By Patrick Kwinten | 5/26/26, 10:27 AM | Development - Notes / Domino | Added by Patrick Kwintensson
In some gray applications (traditional Domino applications who haven't become updated lately) we have CKEditor 4 as rich-text editor embedded. CKEditor 4 reached its End-of-Life in June 2023 so time for an upgrade :-) If you can't run the open source license and need to avoid any priced license you need to search for alternatives.…
Old School Domino Web Dev - a very simple way to upload multiple files, ...just one word
By Jesper Kiær | 4/13/26, 8:07 AM | Development - Notes / Domino | Added by Roberto Boccadoro
I am working in an old Domino web application and to my surprise it is now very easy to upload several files in one go.
I remember it used to be such a hassle, but now with evolved HTML and modern browsers, it is so easy...and of course Domino supporting it.
Quick Tip: how to fix "No component found with ID ... to handle the submit event."
By Oliver Busse | 3/19/26, 3:25 AM | Development - Notes / Domino | Added by Roberto Boccadoro
Lately I stumbled upon a problem with the file download control and the delete button to remove attachments.
Block Web Access to Code/Java Source Files
By Jesse Gallagher | 2/19/26, 9:57 AM | Development - Notes / Domino | Added by Roberto Boccadoro
Last year, while developing Jakarta Modules, I realized that there's a path to accessing Java source files by path in normal NSF apps. This ended up being tracked as a Defect Article, but has unfortunately since been deferred to an unspecified future time. I think it's worth fixing before such a time, though, so I set about doing that.
More Dealing With The TinyMCE Switch
By Jesse Gallagher | 2/17/26, 10:55 AM | Development - Notes / Domino | Added by Roberto Boccadoro
Earlier in the month, I wrote about some of my preliminary experiences dealing with the fallout of the switch from CKEditor to TinyMCE in Domino 14.5. In that post, I talked about some of the ways to deal with covering both, but I only casually mentioned one of the severe limitations in the TinyMCE Dijit implementation.
I wanted a way to configure this in a way that is reasonably global and reasonably light-touch, ideally in a way that would leave older customizations working on pre-14.5 servers. I've come up with a tack that I'm mostly happy with, though it still has some limitations.
Splitting the CKEditor/TinyMCE Difference in XPages on Domino 14.5
By Jesse Gallagher | 2/5/26, 4:16 AM | Development - Notes / Domino | Added by Roberto Boccadoro
At the top of the update notes for Designer 14.5 is this bit:
Ckeditor 4 for Designer/Xpages has been replaced with TinyMCE 6.7. For more information on TinyMCE, see TinyMCE 6 Documentation
My guess is the reason for this change is that CKEditor 4 hit end-of-life in June 2023 and CKEditor 5 dropped the option to license as MPL, meaning the only way to use it in Domino would be to pay for a presumably-onerous enterprise license†. Fair enough.
However, you may notice that the documentation for this change is a little... thin. Specifically, the sentence above is the documentation. Considering that customizing CKEditor has been a popular and long-documented feature of XPages, it's possible you're sitting on some code that used to customize CKEditor to your needs but does not work in 14.5. Since CKEditor no longer ships with Domino, there's no opt-in switch, so we have to deal with it.
Well, I don't have all the answers for how to do this properly, but I did recently have a need to at least start digging into it, so I figured I'd share a preliminary tack to start making cross-version-compatible code.
Quick Tip: Stable ndext Classpaths In Designer 14+
By Jesse Gallagher | 2/4/26, 11:13 AM | Development - Notes / Domino | Added by Roberto Boccadoro
When Notes 14 FP2 came out, I made a blog post detailing a change that HCL made to the JRE classpaths that Designer uses for compilation. Specifically, since jvm/lib/ext is not present in newer Java versions, people had found that they manually had to add JARs from ndext to the JRE to get the same sort of "local JAR" behavior from previous versions. HCL "fixed" this by making it so that Designer adds all of the JARs in ndext to the compiling JRE, which sort of fixed the problem. It had the unfortunate side effect, though, of adding the various contaminants present in the Notes JVM to the classpath, particularly Poi and (in that post's case) the ancient Servlet spec.
VSCode launch settings for DominoJNX and HCL Notes 14.5
By Stephan Wissel | 2/4/26, 11:12 AM | Development - Notes / Domino | Added by Roberto Boccadoro
I'm not the only one who doesn't like Windows, which is a problem when you depend on Domino Designer. Luckily there is Java and DominoJNX. A decade ago I would use Eclipse on an Intel Mac (and Java8). Much has changed. Java is now 21, the Mac is based on Arm and my primary IDE is VSCode. Here is my setup.
New Release: XPages Jakarta EE 3.6.0
By Jesse Gallagher | 1/19/26, 8:39 AM | Development - Notes / Domino | Added by Roberto Boccadoro
Earlier today, I released version 3.6.0 of the XPages JEE project, which has a number of handy improvements.
Testing v14.5 – XPages Log File Reader
By Patrick Kwinten | 1/14/26, 3:20 AM | Development - Notes / Domino | Added by Roberto Boccadoro
With the relocation of the directory where the JAR files are installed on v14.5 I noticed that the XPages Log File Reader was not capable of reading the content of the ndext folder. I posted code on the project page as a feature suggestion, but if you want to have Log File Reader on multiple versions of Domino adjust de ExtBean.java a little bit as follows:
HTMX + HCL Domino XPages Part 5: Client Side Sorting for View/Table
By Heiko Voigt | 11/13/25, 8:22 AM | Development - Notes / Domino | Added by Roberto Boccadoro
In Part 4, we implemented the GET Request to read data from a HCL Domino View and display it as table in the browser. In this part, I want to quickly add sorting to the table, in our case a quick client side function based on JavaScript.
HTMX+HCL Domino Part4: accessing Domino Data
By Heiko Voigt | 11/13/25, 8:21 AM | Development - Notes / Domino | Added by Roberto Boccadoro
So after the first baby steps using HTMX in Xpages and classic elements, we will go forward by starting to access Domino data from HTMX. We will start with a common use case - display the data from a View and add features like sorting to the view.
Quick LLM Access via 4 Lines of Code
By Fredrik Norling | 11/13/25, 8:20 AM | Development - Notes / Domino | Added by Roberto Boccadoro
4 lines of code to call a LLM, with zero maintenance in the future with DominoIQ.
Can you find any devtool that make it simpler to use LLM:s like OpenAI, Claude, Llama, Mistral code setup?
File management in XPages
By Patrick Kwinten | 11/5/25, 4:05 AM | Development - Notes / Domino | Added by Roberto Boccadoro
As part of our IT security activities "file-management" passed me by. With file-management the focus was on the control over files that are being uploaded. There are different levels of control you can implement. Probably the easiest but also the worst control you can apply is the control on file extension.
If you want to go a level deeper you want to check the content type of a file. For this you need third party libraries.
Apache Tika goes much further but it supports to scan a file for it’s meta-data and has a wide support for a large scale of different types of files.
Adding Java Flight Recorder Reports To Domino-Container-Run Tests
By Jesse Gallagher | 11/4/25, 9:02 AM | Development - Notes / Domino | Added by Roberto Boccadoro
About a year and a half ago, I wrote a post talking about adding JaCoCo code coverage to the integration-test suite of the XPages JEE project.
Today, I happened to notice that, though unheralded, Domino 14.5 FP1 bumped the JVM from Semeru 21.0.6 to 21.0.8. Normally, these little patch-level bumps are pretty irrelevant, but this one was a big deal: Java Flight Recorder support came to Semeru 21 in 21.0.7, so now we have it.
HTMX and HCL Domino - Part 3: Classic Web Dev
By Heiko Voigt | 10/6/25, 5:09 AM | Development - Notes / Domino | Added by Roberto Boccadoro
In the last part of this series, we implemented our "Hello World" Sample with HTMX talking to a Domino Servlet in an XPage. While this works fairly well, HTMX is not only for XPages Developers. If you're in the classic world of WebAgents, Pages and Forms, you can also benefit a lot from HTMX - maybe even more than in XPages.
To illustrate that, let's move the content of our sample XPage to a classic Page in Designer. This is only a quick sample to show the nature of this but it should give you a glimpse of what's possible.
HTMX & HCL Domino - Part 2
By Heiko Voigt | 10/6/25, 5:08 AM | Development - Notes / Domino | Added by Roberto Boccadoro
In this part, we will take a look at the basic app architecture of what we are going to build. We will then start to build our basic services on the server side to create a fist communication between HTMX and our back end.
HCL Domino Web Development with HTMX - part 1
By Heiko Voigt | 10/6/25, 5:07 AM | Development - Notes / Domino | Added by Roberto Boccadoro
In this series, I would like to start by talking about what HTMX is and why it can be useful for HCL Domino Developers. I will then start to dive into using it in XPages but the cool thing is, that we can make use of this also in the "classic" Domino Web Development areas with pages, forms, etc. what I call "cuneiform inscription" but hey, whatever works for you.
Better - But Fiddlier - Conversion of DateTime Objects
By Jesse Gallagher | 9/8/25, 10:43 AM | Development - Notes / Domino | Added by Roberto Boccadoro
fAmong the many classes in the lotus.domino API, DateTime has always been particularly cursed. Not quite as cursed as its brother DateRange, which has never been - and still is not - readable from views and is only barely reconstructable in documents, but still rather cursed.
Quick Tip: Windows Auto Login
By Oliver Busse | 9/8/25, 10:41 AM | Development - Notes / Domino | Added by Roberto Boccadoro
I am not posting a lot about tweaking Windows, so please appreciate this one :-)
When I have to use Windows I only use it in a VM on my Mac with Parallels Desktop. These machines are just tools to develop with HCL software, so security is something I care less in this setting. I wondered if it's possible to login automatically to the Windows VM - and actually it is.
A New version: OpenNTF generate-domino-update-site Project - LotusNotus Blog
By Serdar Basegmez | 7/18/25, 11:22 AM | Development - Notes / Domino | Added by Serdar Basegmez
New features and improvements in the OpenNTF generate-domino-update-site Maven project, including Docker and DOTS support.
Using IntelliJ Idea and Domino JNX for Domino Development
By Serdar Basegmez | 6/20/25, 12:48 PM | Development - Notes / Domino | Added by Serdar Basegmez
Streamline Domino development with IntelliJ IDEA: learn setup, Maven integration, JNX usage and productivity tips to modernise your Java workflow.