🚀 SFDX Ultra
The ultimate VS Code extension for Salesforce developers - Enhanced with security scanning, package generation, and comprehensive tool management.
⨠Features
📦 Package XML Generator
- Multi-format support: CSV, TSV, and space-delimited input
- Real-time preview: Live XML generation with split-panel interface
- Error validation: Comprehensive input validation and error reporting
- Beautification: Auto-format and clean up input data
🔄 XML to CSV Converter
- Reverse conversion: Transform package.xml back to CSV format
- Error handling: Robust XML parsing with detailed error messages
- Real-time processing: Instant conversion with visual feedback
🛡ī¸ Security Scanner
- Three scan modes:
- Current Context: Scan active file
- Package.xml: Scan files from selected package.xml
- Complete Project: Full workspace security analysis
- Detailed reporting: Comprehensive results with export capabilities
- Export options: Excel (CSV) and PDF-ready HTML reports
- Progressive checking: Real-time status updates for all tools
- Comprehensive coverage: VS Code, SFDX CLI, Java, Code Scanner, Prettier
- Copy functionality: Easy version information sharing
- Timeout handling: No more hanging status checks
🛠ī¸ Requirements
- VS Code: 1.74.0 or higher
- Salesforce CLI: sf or sfdx (for security scanning)
- Java Runtime: Required for Salesforce CLI operations
- Salesforce Org: Authenticated org connection (for security scanning)
🚀 Quick Start
- Click the SFDX Ultra icon in the Activity Bar
- Choose your desired tool from the sidebar
- Follow the interactive interface
Via Command Palette
- Press
Ctrl+Shift+P (Windows/Linux) or Cmd+Shift+P (Mac)
- Type "SFDX Ultra" to see available commands
- Select your desired action
📝 Usage Examples
Package XML Generation
Input formats supported:
# Comma-separated
ApexClass,MyController
CustomObject,MyObject__c
Flow,MyFlow
# Tab-separated
ApexClass MyController
CustomObject MyObject__c
# Space-separated
ApexClass MyController
CustomObject MyObject__c
Security Scanning
- Ensure Salesforce org is authenticated:
sf org login web
- Open SFDX Ultra sidebar
- Click "🛡ī¸ Security Scanner"
- Choose scan scope and review results
âī¸ Configuration
Customize SFDX Ultra in VS Code settings:
{
"sfdxUltra.checkVersions": true,
"sfdxUltra.debugMode": false,
"sfdxUltra.maxInputSize": 10000,
"sfdxUltra.commandTimeout": 2000
}
🔒 Security Features
- Input sanitization: All user inputs are validated and sanitized
- Command injection prevention: CLI commands are whitelisted and validated
- Path traversal protection: File paths are normalized and validated
- Log injection prevention: Debug logs are sanitized
- Timeout handling: All operations have configurable timeouts
- Debounced input processing: Smooth real-time updates
- Progressive tool checking: Non-blocking status updates
- Efficient XML parsing: Optimized regex-based parsing
- Memory management: Input size limits and cleanup
🐛 Troubleshooting
Status Checker Issues
- Enable debug mode:
"sfdxUltra.debugMode": true
- Check VS Code Developer Console for detailed logs
- Verify CLI tools are in system PATH
Security Scanner Issues
- Ensure Salesforce org authentication:
sf org display
- Check Code Scanner installation:
sf plugins
- Verify workspace contains Salesforce project structure
📜 Changelog
- â
Fixed hanging status checker
- â
Added comprehensive security hardening
- â
Improved error handling and logging
- â
Enhanced performance optimizations
- â
Added input sanitization and validation
- â
Fixed path traversal vulnerabilities
v1.0.0 - Initial Release
- â
Package XML Generator
- â
XML to CSV Converter
- â
Security Scanner integration
- â
Tools Status Checker
🤝 Contributing
Contributions are welcome! Please ensure all security best practices are followed.
📜 License
MIT License - see LICENSE file for details.
| |