M
Marian Edu
Guest
Hi Edsel, the CCS still requires NDA for the moment but wanted to say something about the JSDO Kendo data source for some time so there it goes 
- I know it was probably fun to build the where clause in JS on the client side but you should rather stop that and implement the parse logic in BE base class, this just opens the door wide open for 'sql injection' attacks and many are don't even aware of the fact. - count property, would be maybe better to simply get the count on the same request a data batch is returned. Kendo does support this and we use it with strongloop data source to not only avoid making two calls instead of one for each data page requested but mind you this also means the filters are parsed twice, same for the query open so it's not really something to be neglected. I won't start any rants about dataset usage there nor the before-image importance since those seems to be a given for OERA BE's Cheers, Marian
Continue reading...
- I know it was probably fun to build the where clause in JS on the client side but you should rather stop that and implement the parse logic in BE base class, this just opens the door wide open for 'sql injection' attacks and many are don't even aware of the fact. - count property, would be maybe better to simply get the count on the same request a data batch is returned. Kendo does support this and we use it with strongloop data source to not only avoid making two calls instead of one for each data page requested but mind you this also means the filters are parsed twice, same for the query open so it's not really something to be neglected. I won't start any rants about dataset usage there nor the before-image importance since those seems to be a given for OERA BE's Cheers, MarianContinue reading...