Error Handling in SuiteScript HTTP Requests

The N/http module in SuiteScript handles HTTP requests effectively, but developers must pay attention to error handling and input validation. This ensures robust applications that are secure against XSS (Cross-Site Scripting) attacks. Key considerations include the proper use of request parameters and understanding how errors manifest during script execution.

Understanding Parameters

Parameters in the N/http module are handled as name:value pairs. Depending on the type of HTTP request, parameters are transmitted differently:

• GET requests: Parameters are included in the URL.
• POST requests: Parameters are sent within the request body.

Important Notes

• Parameters should not be arrays. Instead, utilize JSON.stringify and JSON.parse to handle array-type data appropriately.
• Ensure that all parameters are validated before processing to protect against potential XSS injections. Avoid using <script> tags in parameters to bolster security.

Common Error Codes and Their Meanings

When working with the HTTP request properties, you may encounter specific error codes:

Syntax Example

Here’s an example showing how to handle parameters in both GET and POST requests:

1// Example from a Suitelet
2 
3onRequest: function(context) {
4    // Check the request method
5    if (context.request.method === 'GET') { 
6        var myName = context.request.parameters.custpage_nameParam;      
7        var myPhone = context.request.parameters.custpage_phoneParam;    
8    }
9    if (context.request.method === 'POST'){ 
10        var myName = context.request.parameters.nameFld;   
11        var myPhone = context.request.parameters.phoneFld;
12    }
13}

This sample demonstrates capturing parameters based on the request type, ensuring that both GET and POST methods are considered in your Suitelet implementations. For more comprehensive examples, refer to the N/http module script samples.

Key Takeaways

• Always validate parameters to prevent XSS vulnerabilities.
• Understand the distinction between GET and POST transmissions when working with parameters.
• Use JSON methods for handling arrays instead of trying to transmit them directly.

Source: This article is based on Oracle's official NetSuite documentation.