System and method for automatically inserting correct escaping functions for field references in a multi-tenant computing environment
View Patent ↗Methods and systems are provided for automatically correcting escaping functions in a module of page rendering code. The method includes: providing an HTML escaping schema and a script escaping schema; identifying a first character sequence having a first escaping function; determining whether the first character sequence is coded in HTML or coded as a scripted element; correcting the first escaping function using the HTML escaping schema if the first character sequence is coded in HTML; and correcting the first escaping function using the script escaping schema if the first character sequence is coded as a scripted element.
1. A method of inserting escaping functions into field references by a virtual application on an application platform, the method comprising:
providing, by the virtual application on the application platform, a first translation module and a second translation module;
identifying, by the virtual application on the application platform, a first field reference having a first encoding scheme;
identifying, by the virtual application on the application platform, a second field reference having a second encoding scheme different from the first encoding scheme;
inserting, by the virtual application on the application platform, a first escaping function into the first field reference to produce a first edited field reference using the first translation module;
inserting, by the virtual application on the application platform, a second escaping function into the second field reference to produce a second edited field reference using the second translation module;
presenting the first edited field reference and the second edited field reference to a user for acceptance; and
saving, upon acceptance by the user, the first edited field reference and the second edited field reference.
2. The method of claim 1 , further comprising rendering a page using the first edited field reference and the second edited field reference.
3. The method of claim 2 , wherein rendering comprises displaying the page in a web browser.
4. The method of claim 1 , wherein the first translation module embodies a first escaping strategy having a first set of syntax rules, and the second translation module embodies a second escaping strategy having a second set of syntax rules.
5. The method of claim 1 , wherein the first encoding scheme comprises HTML, and the first translation module comprises an HTML based entity encoding strategy.
6. The method of claim 5 , wherein the second encoding scheme comprises a scripting language, and the second translation module comprises a script based encoding strategy.
7. The method of claim 6 , wherein the scripting language comprises JavaScript, and the script based encoding strategy comprises JSENCODE.
8. The method of claim 1 , wherein identifying the first and second field references comprises character by character scanning.
9. The method of claim 8 , wherein scanning comprises using a finite state machine to determine the then current output context.
10. The method of claim 9 , wherein the then current output context is based on one of the first and the second encoding schemes.
11. The method of claim 10 , wherein at least one of the first and second field references comprise a sequence of characters to be displayed in a rendered page.
12. The method of claim 1 , wherein inserting escaping functions into field references is performed by a server hosting multiple tenants in an on demand computing environment.
13. The method of claim 1 , wherein inserting escaping functions into field references is performed by a processor hosting a single tenant in a stand-alone computing environment.
14. The method of claim 1 , wherein the presenting step includes highlighting the first escaping function in the first edited field reference and the second escaping function in the second edited field reference.
15. The method of claim 1 , further comprising initiating the presenting step in response to receiving a save request from the user.