System, method and computer program product for rendering data of an on-demand database service safe
View Patent ↗In accordance with embodiments, there are provided mechanisms and methods for rendering data of an on-demand database service safe. These mechanisms and methods for rendering on-demand database service data safe can enable embodiments to alleviate any security risk that would otherwise be posed by such data. The ability of embodiments to provide such additional safety may lead to improved security in the context of an on-demand database service.
1. A method, comprising:
identifying data in a database of a multi-tenant on-demand database service capable of being displayed utilizing the on-demand database service, the data including a plurality of codes and being associated with a field of the database of the on-demand database service;
analyzing, by the multi-tenant on-demand database service, the codes of the data stored in the database of the multi-tenant on-demand database service to identify codes that pose a security risk, utilizing a processor;
rendering the data safe, at least in part, by removing the codes identified to pose the security risk; and
storing the data and the data rendered safe, and synchronizing the data and the data rendered safe in response to an update associated with one of the data and the data rendered safe.
2. The method of claim 1 , wherein the data includes a document.
3. The method of claim 1 , wherein the data includes customer relationship management data.
4. The method of claim 1 , wherein the data is identified after being received over a network.
5. The method of claim 1 , wherein the analyzing and the rendering are performed by a server of the on-demand database service.
6. The method of claim 1 , wherein the codes include mark-up language tags.
7. The method of claim 1 , wherein the analysis includes comparing the data against at least one entity for identifying the codes that pose the security risk.
8. The method of claim 7 , wherein the entity includes a whitelist.
9. The method of claim 7 , wherein the entity includes a blacklist.
10. The method of claim 7 , wherein the entity includes a pattern.
11. The method of claim 1 , wherein the analysis includes parsing the data.
12. The method of claim 1 , wherein a spell check function is performed in parallel with the analysis.
13. The method of claim 1 , and further comprising determining whether a security feature is enabled by a user, and conditionally performing the rendering based on the determination.
14. The method of claim 1 , and further comprising determining whether predetermined functionality is enabled, wherein the data is conditionally rendered safe based on the determination.
15. The method of claim 14 , wherein the functionality includes at least one of spell check functionality, electronic messaging functionality, search engine functionality, reporting functionality, exporting functionality, and listing functionality.
16. A non-transitory machine-readable medium carrying one or more sequences of instructions which, when executed by one or more processors, cause the one or more processors to carry out the steps of:
identifying data in a database of a multi-tenant on-demand database service capable of being displayed utilizing the on-demand database service, the data including a plurality of codes and being associated with a field of the database of the on-demand database service;
analyzing, by the multi-tenant on-demand database service, the codes of the data stored in the database of the multi-tenant on-demand database service to identify codes that pose a security risk;
rendering the data safe, at least in part, by removing the codes identified to pose the security risk; and
storing the data and the data rendered safe, and synchronizing the data and the data rendered safe in response to an update associated with one of the data and the data rendered safe.
17. An apparatus, comprising:
a processor; and
one or more stored sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of:
identifying data in a database of a multi-tenant on-demand database service capable of being displayed utilizing the on-demand database service, the data including a plurality of codes and being associated with a field of the database of the on-demand database service;
analyzing, by the multi-tenant on-demand database service, the codes of the data stored in the database of the multi-tenant on-demand database service to identify codes that pose a security risk;
rendering the data safe, at least in part, by removing the codes identified to pose the security risk; and
storing the data and the data rendered safe, and synchronizing the data and the data rendered safe in response to an update associated with one of the data and the data rendered safe.
18. A method for transmitting code for use in a multi-tenant database system on a transmission medium, the method comprising:
transmitting code for identifying data in a database of a multi-tenant on-demand database service capable of being displayed utilizing the on-demand database service, the data including a plurality of codes and being associated with a field of the database of the on-demand database service;
transmitting code for analyzing, by the multi-tenant on-demand database service, the codes of the data stored in the database of the multi-tenant on-demand database service to identify codes that pose a security risk, utilizing a processor;
transmitting code for rendering the data safe, at least in part, by removing the codes identified to pose the security risk; and
transmitting code for storing the data and the data rendered safe, and synchronizing the data and the data rendered safe in response to an update associated with one of the data and the data rendered safe.
19. A method of claim 1 , further comprising converting at least a portion of the codes included in the data rendered safe from a plaintext format to a mark-up language format, disabling at least one link identified in the data rendered to be safe by converting the at least one link to text, and displaying the data rendered to be safe including the converted at least a portion of the codes and the converted at least one link.