Creating Custom Rules with XPath
CodeScan allows you to create custom rules using XPath. You can use these rules to trigger violations based on any special requirements you may have.
Note:
The custom XPath Visualforce rule template uses XPath version 2 whereas the custom XPath Apex rule template uses XPath version 1.
This needs to be changed in the design as the rules are being developed or could introduce bugs.
Before you begin
You will need an excellent working knowledge of XPath to get this operational.
Note: To download the Apex Rule Designer tool, you need a subscription code.
Installing the Apex-Custom Rule Designer
Run the following command to install the downloaded Apex-Custom Rule Designer:
Apex
Here are some examples of XPath queries for Apex.
Naming:
XPath queries can be used to catch unwanted trends or enforce standards in the naming of your classes, methods, and variables.
This query will catch any class names that do not start with PREFIX_
This example would catch the first class here:
starts-with can also be replaced with:
ends-with - This checks for a string at the end of the @image name.
matches - This uses the regular expression in place of the string to check for patterns in the @image name.
Note: When using a regular expression with escapes ( \ character) in XPath, you will need to double escape them when adding them in the UI due to the way our rule engine parses them.
eg. \. will become \\.
Visualforce and Aura Lightning
You can also use this technique for VisualForce (in the Apex-Custom Rule designer, select the VisualForce language and use XPath 2.0 instead of XPath 1.0).
Naming:
XPath queries can be used to catch unwanted trends or enforce standards in the naming of your pages.
This query will catch any page names that do not start with PREFIX_
This example would catch the first Filename here, but ignore the second:
starts-with can also be replaced with:
ends-with - This checks for a string at the end of the @image name.
matches - This uses the regular expression in place of the string to check for patterns in the @image name.
Other Salesforce metadata
Most other metadata types come out of Salesforce in XML format. To scan these types, you can add any metadata you want to the list of file suffixes as seen in the Enable CodeScan Cloud Metadata Rules article.
XPath expressions for Salesforce metadata should start with double-slashes (â//â). For example-
Point to Note:
In CodeScan Designer, verify the XPath expressions. Using an XPath expression generated by any other online tool may not work because the XPath expression is dependent on how the AST is generated, which varies per tool.
If you want to create a rule for a new metadata type, spend time looking at the XML to determine where your fields, rules, decisions, or subtasks are, and then look into how to validate them. For example, if you want to limit a flow to 20 decision points, the XPath would look something like this:
The type of component being visualized is flow. Decisions exist within that flow; they are a direct child of the flow within the XML. Finally, the count () method can determine if there are too many flows.
Adding your Custom Rule
Login to your CodeScan Cloud account or SonarQubeâĸ
Click on the Rules menu
In the Filters pane, search for Xpath rule template.
Select the XPath rule template of the language of your choice.
Under Custom Rules click on Create.
Assign the values to the Name, Key, Type, Severity, Status, Description and Message fields.
Insert the Xpath created in the field provided and click on Create.
Now you can add it to your Quality Profile as you would any built in-rule. Please refer to our guide for customizing Quality Profiles for these steps.
How to Validate an XPath Expression with CodeScan Rule Designer
In the following screenshot, the CodeScan Rule Designer rule is not being used to validate the XPath expression.
To download the Custom Rule designer:
Enter the Source Code
This will generate an Abstract Tree based on the code.
In the XPath query section, enter the XPath and click 'Go' to Validate the Path.
If the XPath is correct, it will highlight the source code lines for that XPath expression.
Example:
Last updated