DOCSLIB.ORG

“Develop in Pharo, Deploy in Gemstone” with Seaside Johan Brichau

Total Page：16

File Type：pdf, Size：1020Kb

Download full-text PDF Read full-text
“Develop in Pharo, Deploy in Gemstone” with Seaside Johan Brichau 10 Years later “develop in Pharo, deploy in Gemstone” with Seaside Johan Brichau - [email protected] Yesplan ? Web Application (SaaS) to manage an event venue Yesplan ? Web Application (SaaS) to manage an event venue Yesplan ? Web Application (SaaS) to manage an event venue Yesplan ? Web Application (SaaS) to manage an event venue - jQuery - jQuery-UI - KnockoutJs - D3.js - Datatables - Jasper reports - …. Yesplan ? Web Application (SaaS) to manage an event venue - jQuery - jQuery-UI - KnockoutJs - D3.js - Datatables - Jasper reports ReactJs - …. Yesplan ? • Founded by aa. and arts centre • Over 200 customers (in BE, NL, Lux, CH, UK, NO, DK, FI) • Currently 25 employees: • 5 software engineers, 1 dev ops engineer, 1 interaction designer and 1 report engineer • sales, account management, marketing, support, • Emphasis on making an application that not only works, but also is enjoyable to use Yesplan 0.1 (2009) • Yesplan calendar built using Seaside’s “full page rendering” in-place editing info bubbles title • Standard ‘component calls component’ implementation group • A lot of jQuery for animations and ajax updates group visualization • Javascript universe was “big mess” (excluding notable exceptions) • More errors than functionality in most ‘plugins’ • Bad performance and horrible engineering • Pharo + GoodsDB in production Yesplan 1.0 (2010) • Yesplan calendar with incremental ajax updates • A lot of jQuery-based scripts • SVG animations using generated Javascript • Develop in Pharo, deploy in GemStone • Pharo for development • GemStone for deployment • Unit tests + Seaside Component Tests Yesplan 1.0 (2010) • Yesplan calendar with incremental ajax updates • A lot of jQuery-based scripts Magma Goods Goods w/ manual barrier Gemstone • SVG animations using generated Javascript 6 • Develop in Pharo, deploy in GemStone 4,5 • Pharo for development 3 seconds 0,68s 1,5 • GemStone for deployment 0 • Unit tests + Seaside Component Tests 1 commit after one change in 100 000 loaded objects Yesplan 1.x (2010-2013) html span class: 'name'; • Seaside with a lot of Javascript generation passenger: self; with: self visibleresourceUse event name. • Separate Javascript source code files html jQuery this • on: 'click' jQuery event delegation selector: '.name' do: ((JSStream on: 'editEventName(event.target)') asFunction: #(event)) • Parasol html document addLoadScript: • Selenium (Webdriver) testing ((((html jQuery expression: (JSStream on: 'target')) editable type: 'text'; callback: [ :val | nameValue value: val ]; secondCallback: (html jQuery ajax • Targeted at Seaside apps but not limited to callback:[:theCells | theCell value changeEventName: nameValue value]] passengers: ((html jQuery expression: (JSStream on: 'target'))); script: [:s | s<< (theCell value afterNameUpdateScriptOn: s)]); yourself) asFunction: #(target)) assignTo: 'editEventName'). Yesplan 1.x (2010-2013) Yesplan 1.x (2010-2013) Yesplan 1.x (2010-2013) Yesplan 1.x (2010-2013) Yesplan 1.x (2010-2013) Yesplan (2014-2015) • Experiment with Hybrid Web Application • Server-side session: Seaside • Client-side UI: d3js, KnockoutJs, BackboneJs,… Yesplan (2014-2015) • Experiment with Hybrid Web Application • Server-side session: Seaside • Client-side UI: d3js, KnockoutJs, BackboneJs,… Yesplan (2014-2015) • Experiment with Hybrid Web Application • Server-side session: Seaside • Client-side UI: d3js, KnockoutJs, BackboneJs,… Yesplan (today) • Full Hybrid Web Application • Server-side session mgmt: Seaside • Existing UI: server-side Seaside • New UI: client-side ReactJs • Operations • SmalltalkCI (Travis-CI), parallel running test packages • Sentry central error logging (Js + Smalltalk) • Numbers • +200 Gemstone databases • +2000 simultaneous sessions generated Client Server Web components Operations Data objects generated rich client application Client Server Web components REST API Reporting engine Mobile Portal Operations Data objects Seaside-based ReactJs <html> … <body> …. <script> … </script> </body> </html> Seaside-based ReactJs <html> … <body> …. <script> … </script> </body> </html> Develop in Pharo, deploy in Gemstone • Key Tools • Pros • Grease • Seaside in GsDevKit • Metacello • “Transparent” persistency • https://github.com/GsDevKit/ • Licensing model • Gemstone performance, Pharo coolness • Cons • NO ORM • Dialect differences only become larger • Live debugging of production environment • Pharo-specific classes • “Transparent” persistency Yesplan API v1.0.1 - 12 April 2013 profiles[0…n] Cost model Custom data item name : string durationdiscount Discount name : string Resourcegroup costing Resourcebooking costing account : string (or null) notation : string keyword : string group: string alteration : string (or null) purchaseprice : decimal type : string volumediscount rates : integer[2][1…n] alteration : string (or null) cost : decimal (or null) invoice : boolean children[0…n] cost : decimal (or null) resourcecostings[1…n] price : decimal (or null) costmodel cost : string (cost formula) (1 or array) price : decimal (or null) actualprice : decimal (or null) price : string (cost formula) (1 or array) vat: decimal (or null) invoice : boolean costing vat : decimal Custom data group Custom data element actualprice : decimal (or null) accountableto: string Abstract Resourcebooking type : string number : integer value : string|integer|decimal|date|time|datetime| costings[1…n] children[1…n] role : string (or null) resource groups[0…n] resourcebooking | contactbooking (or null) ResourceSetbooking costing event Abstract Resource Event Costings [0…n] resourcetype : string name : string alteration : string (or null) Resourcebookinggroup Resourcebooking customdata Custom data List group : string cost: decimal (or null) actualnumber: integer [opt.] roles : string[0…n] price : decimal (or null) event actualstart: datetime [opt.] Event Resource Booking List description : stringcustomdata netprice : decimal (or null) actualend: datetime [opt.] vat: decimal (or null) external : boolean actualprice : decimal (or null) rented : boolean children[0…n] children[0…n] resource costmodels[0…n] Resource custom data List Singleton Resourcebooking Standard Resourcebooking Resourcesetbooking start : datetime start : datetime actualnumber: integer [opt.] Placeholder end : datetime end : datetime Resource actualstart: datetime actualstart: datetime [opt.] amount : integer actualend: datetime actualend: datetime [opt.] actualnumber: integer [opt.] Location Resource Set resources[0…n] Profile locations[0…n] Resourcebooking custom data List name : string color : color costings[1..n] production (or null) resourcebooking Status name : string profile statustypes : string[0…n] Abstract Event event Event custom data List backgroundcolor : color status name : string customdata textcolor : color starttime : datetime attachments endtime : datetime group (or null) history isproduction : boolean Event History List tasks Abstract Schedule Summary Group Schedule schedules[1…n] ??? entries[0…n] History entry time : datetime schedule Group Schedule Summary Event Schedule Summary user : string Attachment List description : string children[0…n] group group attachments[0…n] Group repeatedevent resourcebookings event Attachment Recurrence Abstract Task startdate : date originalname : string repeatedevents [1…n] Event status : string rule : (recurrence rule) type : string defaultscheduledescription : string name : string comment : string recurrence defaultschedulestarttime : datetime team : string date : date defaultscheduleendtime : datetime (or null) cost : decimal user : string attributes : attributedictionary Event Task List tasks[0…n] due : datetime url : string start : datetime tasks[0…n] assignedby : string assignedto : string description : string schedule event contactbookings Task Task Group Event Schedule Event Contact Booking List duration : duration defaultstartidx : integer defaultstopidx : integer contactsbookings[0…n] event entries[0…n] Contactbooking custom data List Schedule entry Event Contact Booking contactbooking description : string role : string customdata starttime : datetime entries[0…n] contact Contact contact Contact custom data List _type : string comment : string (or null) address : string (or null) customdata contactinfo[0…n] labels : string[0…n] name : string attributes : attributedictionary Link Person Organization jobtitle : string vipcode : string (or null) vat : string (or null) department: string (or null) Legend firstname : string type : string (or null) lastname : string Contactinfo addresslines : string (or null) reference link (retrieve needs separate call/request) type : string zipcode : string (or null) value : string country : string (or null) organization nesting link (entity directly included) city : string (or null) links[0…n] subtype links[0…n] person Develop in Pharo: GT ! Develop in Pharo: GT ! Thank you! Johan Brichau [email protected] [email protected].
Load more

Recommended publications
  • Application-Level Virtual Memory for Object-Oriented Systems Mariano Martinez Peck
    Application-Level Virtual Memory for Object-Oriented Systems Mariano Martinez Peck To cite this version: Mariano Martinez Peck. Application-Level Virtual Memory for Object-Oriented Systems. Program- ming Languages [cs.PL]. Université des Sciences et Technologie de Lille - Lille I, 2012. English. tel-00764991 HAL Id: tel-00764991 https://tel.archives-ouvertes.fr/tel-00764991 Submitted on 26 Dec 2012 HAL is a multi-disciplinary open access L’archive ouverte pluridisciplinaire HAL, est archive for the deposit and dissemination of sci- destinée au dépôt et à la diffusion de documents entific research documents, whether they are pub- scientifiques de niveau recherche, publiés ou non, lished or not. The documents may come from émanant des établissements d’enseignement et de teaching and research institutions in France or recherche français ou étrangers, des laboratoires abroad, or from public or private research centers. publics ou privés. N° d’ordre : 40886 THESE présentée en vue d’obtenir le grade de DOCTEUR en Spécialité : informatique par Mariano MARTINEZ PECK DOCTORAT DELIVRE CONJOINTEMENT PAR MINES DOUAI ET L’UNIVERSITE DE LILLE 1 Titre de la thèse : Application-Level Virtual Memory for Object-Oriented Systems Soutenue le 29/10/2012 à 10h devant le jury d’examen : Président Jean-Bernard STEFANI (Directeur de recherche – INRIA Grenoble- Rhône-Alpes) Directeur de thèse Stéphane DUCASSE (Directeur de recherche – INRIA Lille) Rapporteur Robert HIRSCHFELD (Professeur – Hasso-Plattner-Institut, Universität Potsdam, Allemagne) Rapporteur Christophe DONY (Professeur – Université Montpellier 2) Examinateur Roel WUYTS (Professeur – IMEC & Katholieke Universiteit Leuven, Belgique) co-Encadrant Noury BOURAQADI (Maître-Assistant – Mines de Douai) co-Encadrant Marcus DENKER (Chargé de recherche – INRIA Lille) co-Encadrant Luc FABRESSE (Maître-Assistant – Mines de Douai) Laboratoire(s) d’accueil : Dépt.
    [Show full text]
  • Transform View
    4/20/04 Doc 17 Model-View-Controller part 2 slide 1 CS 635 Advanced Object-Oriented Design & Programming Spring Semester, 2004 Doc 17 Model-View-Controller part 2 Contents Transform View ......................................................................... 2 Context Object .......................................................................... 5 Application Controller ................................................................ 7 Continuation-Based Web Servers ............................................. 9 References Patterns of Enterprise Application Architecture, Folwer, 2003, pp 330-386 Core J2EE Patterns: Best Practices and Design Strategies, 2nd, Alur, Crupi, Malks, 2003 Copyright ©, All rights reserved. 2004 SDSU & Roger Whitney, 5500 Campanile Drive, San Diego, CA 92182-7700 USA. OpenContent (http://www.opencontent.org/opl.shtml) license defines the copyright on this document. 4/20/04 Doc 17 Model-View-Controller part 2 slide 2 Transform View A view that processes domain data elements by element and transforms them into HTML Given a domain object, MusicAlbum, how to generate a web page for the object? • Use Template View • Convert object into html 4/20/04 Doc 17 Model-View-Controller part 2 slide 3 Converting object into html One could add toHtml to the object MusicAlbum ragas = new MusicAlbum.find(“Passages”); String html = ragas.toHtml(); • Domain object is coupled to view language • Provides only one way to display object Better use XML and XSLT • Convert domain object to XML • Use XSLT to convert XML into HTML Now
    [Show full text]
  • Visualage for Smalltalk Handbook Volume 2: Features
    SG24-2219-00 VisualAge for Smalltalk Handbook Volume 2: Features September 1997 SG24-2219-00 International Technical Support Organization VisualAge for Smalltalk Handbook Volume 2: Features September 1997 IBM Take Note! Before using this information and the product it supports, be sure to read the general information in Appendix A, “Special Notices.” First Edition (September 1997) This edition applies to VisualAge for Smalltalk, Versions 2, 3, and 4, for use with OS/2, AIX, and Microsoft Windows 95/NT. Comments may be addressed to: IBM Corporation, International Technical Support Organization Dept. QXXE Building 80-E2 650 Harry Road San Jose, California 95120-6099 When you send information to IBM, you grant IBM a non-exclusive right to use or distribute the information in any way it believes appropriate without incurring any obligation to you. Copyright International Business Machines Corporation 1997. All rights reserved. Note to U.S. Government Users — Documentation related to restricted rights — Use, duplication or disclosure is subject to restrictions set forth in GSA ADP Schedule Contract with IBM Corp. Contents Preface . xiii How This Redbook Is Organized ....................... xiv ITSO on the Internet ................................ xv VisualAge Support on CompuServe ..................... xvii About the Authors ................................ xvii Acknowledgments . xviii Comments Welcome . xix Chapter 1. AS/400 Connection . 1 Multiple Programs with a Single Remote Procedure Call ......... 1 RPC Part Sets Commit Boundary ........................ 1 Connection Problem with V3R1 ......................... 2 AS/400 Communication Error .......................... 2 Strange Characters on Log-on Window .................... 3 Quick Form from AS/400 Record Classes ................... 3 Communication . 4 Read Next/Previous . 4 SQL Statements . 5 Data Queues and Records ............................ 6 ODBC Requirements .
    [Show full text]
  • VAST Platform 2021 Design It. Build It. Deploy
    VAST Platform 2021 10.0.2 Design it. Build it. Deploy it. Create object-oriented software that’s stable, easy to maintain, and deploys smoothly — all from the same comprehensive development environment. The VAST Platform is a comprehensive integrated development environment (IDE) that works with a Smalltalk language New in 9.2.2 runtime. Because it’s Smalltalk-based, the IDE and the runtime are essentially a development ‘image’ that’s executed by a virtual machine (VM). First released as IBM® VisualAge® Smalltalk in 1993, the VAST Platform has built upon this original foundation starting in 2005 and has continued to grow in power and flexibility through ongoing research and development. VAST has evolved beyond what the original VisualAge developers could have foreseen, and allows developers to quickly iterate new ideas with proven Smalltalk-based live programming methodologies and deploy to a variety of desktop, cloud, Internet of Things (IoT), and on-premise server hardware. Version Control What’s New in VAST 2021 • Git/Tonel tooling Platform Development Tools • Brace array syntax • Migration to LLVM 10 compiler toolchain • Method type annotations • Asynchronous call-ins • SELinux Support (As of 10.0.1) Look and Feel Core Libraries • Hi-DPI fixes and enhancements • Cross-platform OsProcess framework • Product branding and other visual updates • Futures/promises asynchronous framework • High-resolution timer • Secure RNG stream • Swapper performance increase • Enhanced walkback generator Documentation • Lightweight/mobile-friendly documentation Communications • IBM MQ Series SSL/TLS support and 64-bit updates • Improved SMTP handling • Socket fixes and enhancements Top Features Type Analysis & Enhanced Multi-CPU Capable with Asynchronous Code Completion FFI & OsProcess Programming Real-time and lag free.
    [Show full text]
  • Liste Von Programmiersprachen
    www.sf-ag.com Liste von Programmiersprachen A (1) A (21) AMOS BASIC (2) A# (22) AMPL (3) A+ (23) Angel Script (4) ABAP (24) ANSYS Parametric Design Language (5) Action (25) APL (6) Action Script (26) App Inventor (7) Action Oberon (27) Applied Type System (8) ACUCOBOL (28) Apple Script (9) Ada (29) Arden-Syntax (10) ADbasic (30) ARLA (11) Adenine (31) ASIC (12) Agilent VEE (32) Atlas Transformatikon Language (13) AIMMS (33) Autocoder (14) Aldor (34) Auto Hotkey (15) Alef (35) Autolt (16) Aleph (36) AutoLISP (17) ALGOL (ALGOL 60, ALGOL W, ALGOL 68) (37) Automatically Programmed Tools (APT) (18) Alice (38) Avenue (19) AML (39) awk (awk, gawk, mawk, nawk) (20) Amiga BASIC B (1) B (9) Bean Shell (2) B-0 (10) Befunge (3) BANCStar (11) Beta (Programmiersprache) (4) BASIC, siehe auch Liste der BASIC-Dialekte (12) BLISS (Programmiersprache) (5) Basic Calculator (13) Blitz Basic (6) Batch (14) Boo (7) Bash (15) Brainfuck, Branfuck2D (8) Basic Combined Programming Language (BCPL) Stichworte: Hochsprachenliste Letzte Änderung: 27.07.2016 / TS C:\Users\Goose\Downloads\Softwareentwicklung\Hochsprachenliste.doc Seite 1 von 7 www.sf-ag.com C (1) C (20) Cluster (2) C++ (21) Co-array Fortran (3) C-- (22) COBOL (4) C# (23) Cobra (5) C/AL (24) Coffee Script (6) Caml, siehe Objective CAML (25) COMAL (7) Ceylon (26) Cω (8) C for graphics (27) COMIT (9) Chef (28) Common Lisp (10) CHILL (29) Component Pascal (11) Chuck (Programmiersprache) (30) Comskee (12) CL (31) CONZEPT 16 (13) Clarion (32) CPL (14) Clean (33) CURL (15) Clipper (34) Curry (16) CLIPS (35)
    [Show full text]
  • Gemstone/S Programming Guide
    GemStone® GemStone/S Programming Guide December 2001 GemStone/S Version 6.0 GemStone Programming Guide IMPORTANT NOTICE This manual and the information contained in it are furnished for informational use only and are subject to change without notice. GemStone Systems, Inc. assumes no responsibility or liability for any errors or inaccuracies that may appear in this manual or in the information contained in it. The manual, or any part of it, may not be reproduced, displayed, photocopied, transmitted or otherwise copied in any form or by any means now known or later developed, such as electronic, optical or mechanical means, without written authorization from GemStone Systems, Inc. Any unauthorized copying may be a violation of law. The software installed in accordance with this manual is copyrighted and licensed by GemStone Systems, Inc. under separate license agreement. This software may only be used pursuant to the terms and conditions of such license agreement. Any other use may be a violation of law. Limitations The software described in this manual is a customer-supported product. Due to the customer’s ability to change any part of a Smalltalk image, GemStone Systems, Inc. cannot guarantee that the GemStone programming environment will function with all Smalltalk images. 1988–2001 by GemStone Systems, Inc. All rights reserved. Use, duplication, or disclosure by the Government is subject to restrictions set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data and Computer Software clause at DFARS 252.227-7013. Trademarks GemStone, GemBuilder, GemConnect, GemEnterprise, andGemORB are registered trademark of GemStone Systems, Inc. The GemStone logo is a registered trademark of GemStone Systems, Inc.
    [Show full text]
  • AIDA/Scribo a Powerful CMS at Your Fingertips!
    AIDA/Scribo a powerful CMS at your fingertips! Nicolas Petton Contents Why another CMS? Architecture History Scribo at work Future Demo Contents Why another CMS? Architecture History Scribo at work Future Demo What is a CMS? Content Management System Web application (Web CMS or WCMS) Used for creating and managing HTML content : HTML pages Associated documents (images, attached files, etc) Why another CMS? Leveraging Smalltalk strengths Leveraging Aida/Web strengths CMS framework for different CMS apps For developers and end users Leveraging AIDA/Web strengths RESTFull and nice looking URLs User, group, role support Security (Access control) Components Ajax integration Contents Why another CMS? Architecture History Scribo at work Future Demo Architecture Architecture Document Attachments Versioning Access rights Lifecycle Locking Workflow Multilingual Subdocuments support References Persistence Other Document Versioning Many versions Url always points to the released version Access to all versions (http://www.site.org/article.html? version=4) Document Lifecycle States during document's life : #pending, #released, #obsolete, ... Can be extended and tailored Document Workflow Managing flow of work through document lifecycle From editing, multiperson approvals, to releasing Who when what needs to do some task Email requesting for some task Email notifications of task done Document Subdocument Vertical hierarchy of documents Folder is a subclass of Document Folder can contain documents or other folders Document can have Chapters (again subclass
    [Show full text]
  • Using Gemstone
    Chapter 17: Using GemStone Let’s get started using GemStone. 1. First we will quickly create a ‘Hello World’ application in GemStone. a. Start GemStone and the Seaside gems using the instructions from Chapter 16 (if it is not running) and launch GemTools. b. In the GemTools launcher, select Seaside, and click the ‘Login’ button. Enter your name if requested. c. Once logged in, click the ‘Tools…’ button and select 'System Browser'. d. This will open an OB System Browser showing GemStone code. Click in the first column to get a class creation template and enter the following in the text area: WAComponent subclass: 'HelloWorld' instVarNames: #() classVars: #() classInstVars: #() poolDictionaries: #[] inDictionary: '' category: 'GLASS' 14-Feb-11 Copyright © 2011 by VMware, Inc. 1 Chapter 17: Using GemStone e. This should update your System Browser to show the new class. f. Click in the third column to change the text area from a class definition to a method template. Enter and save the render method. renderContentOn: html html heading: 'Hello World!'. 14-Feb-11 Copyright © 2011 by VMware, Inc. 2 Chapter 17: Using GemStone g. Register the component as an application. Select the GemTools Launcher, click in the text area below the buttons and enter the expression to register the application. Press <Ctrl>+<D> (for ‘do-it’) to evaluate the expression. WAAdmin register: HelloWorld asApplicationAt: 'hello'. h. Open a web browser on http://glass/browse and note that ‘hello’ is listed. i. Click on the ‘hello’ link to get the application. 14-Feb-11 Copyright © 2011 by VMware, Inc. 3 Chapter 17: Using GemStone 2.
    [Show full text]
  • Dead Babies and Seaside Towns Ebook, Epub
    DEAD BABIES AND SEASIDE TOWNS Author: Alice Jolly Number of Pages: 432 pages Published Date: 25 Sep 2018 Publisher: Unbound Publication Country: London, United Kingdom Language: English ISBN: 9781783523610 DOWNLOAD: DEAD BABIES AND SEASIDE TOWNS Dead Babies and Seaside Towns PDF Book More than 100 fiction films and documentaries are discussed in this completely original and definitive work on how film meets neurology. Creatively imagined and beautifully written, this book: Interweaves theoretical concepts and professional practice on every pageUses cultural economy to teach the essential concepts and thinkersIntegrates case studies from fashion and gaming to journalism and musicTeaches strategies for navigating the links between skills, industries, creativity and markets. How the statutory residence test applies from April 2013. Gen. Environment focuses on inclusion, including residence life, the local community, the working and learning environment, and external factors and events such as national and international news events or town gown relationships. She has built up a professional reputation from her hands-on, direct client experience, as well as through evidence gained from many years of conducting client surveys and analysis of client data. With this book, you will learn about technical, legal, and resource sharing developments that will contribute to the future distribution of global information in libraries. All you have to do is read the book to start your new journey today. "-Gary Stoner, Ph. " Murach's ADO. She also illustrates assumptions about language and being American, as these are both debated and shared by each "side" of the language and immigration debates in California and Georgia. The report lays out clear evidence of the significant successes that can be achieved by properly structured RCM programs.
    [Show full text]
  • Car Agency in Lakewood Going to the Dogs!
    July 7th, 2016 The Ocean County Gazette - www.ocgazette.news 1 The OC Gazette P.O. Box 577 Seaside Heights NJ 08751 On The Web at: www.ocgazette.news JULY 29TH, 2016 VOL. 16 NO. 570 THIS WEEKS Car Agency in Lakewood Going ALERT SHERIFF’S ISSUE OFFICER CATCHES Pages 8-9 to the Dogs! Ocean County POSSIBLE BURGLARY Featured Events FROM COURTROOM Pages 10-11 Ocean County WINDOW; WARRANT Library Weekend Events and ISSUED Exhibits TOMS RIVER – The keen eye of Pages 12-13 an Ocean County Sheriff’s Officer Ocean County caught a suspicious male gaining Artists Guild entry into an apartment on Washington Street in the downtown Page - 16-17 area on July 21. And now, that Long Beach Island Foundation of the person has a warrant out for his Arts & Sciences arrest on charges of burglary, theft Events and criminal trespassing. According to a report provided Page 25 by Ocean County Sheriff Michael Museums, Historic, G. Mastronardy, Sheriff’s Officer Arts & Exhibits Robert Mazur was just completing Photo credits: Courtesy of Caregiver Volunteers; Picture of Alice, courtesy of Michael his security detail around noon in Page 25 Bagley Photography Alice, Lavallette, with Golden Retriever Simon Courtroom 214 on the third floor A Summary of of 213 Washington St., when he Comedy & Stage glanced out the window toward the Performances Kick off the “Dog Days of Summer” $5.00 to the nonprofit Caregiver with a celebration of Caregivers, Canines® program for every vehicle Harbor Front Condominiums at 215 Page 27-34 Canines, and Cars at the Larson Ford sold during the Caregivers, Canines, Washington Street.
    [Show full text]
  • Design and Analysis of Web Application Frameworks
    Aarhus University PhD Dissertation Design and Analysis of Web Application Frameworks Mathias Schwarz Supervisor: Anders Møller Submitted: January 29, 2013 Abstract Numerous web application frameworks have been developed in recent years. These frameworks enable programmers to reuse common components and to avoid typical pitfalls in web application development. Although such frameworks help the pro- grammer to avoid many common errors, we find that there are important, common errors that remain unhandled by web application frameworks. Guided by a survey of common web application errors and of web application frameworks, we identify the need for techniques to help the programmer avoid HTML invalidity and security vulnerabilities, in particular client-state manipulation vulnerabilities. The hypothesis of this dissertation is that we can design frameworks and static analyses that aid the programmer to avoid such errors. First, we present the JWIG web application framework for writing secure and maintainable web applications. We discuss how this framework solves some of the common errors through an API that is designed to be safe by default. Second, we present a novel technique for checking HTML validity for output that is generated by web applications. Through string analysis, we approximate the out- put of web applications as context-free grammars. We model the HTML validation algorithm and the DTD language, and we generalize the validation algorithm to work for context-free grammars. Third, we present a novel technique for identifying client-state manipulation vulnerabilities. The technique uses a combination of output analysis and informa- tion flow analysis to detect flow in the web application that might be exploited by malicious clients.
    [Show full text]
  • Sindarin: a Versatile Scripting API for the Pharo Debugger
    Sindarin: A Versatile Scripting API for the Pharo Debugger Thomas Dupriez Guillermo Polito Steven Costiou Univ. Lille, CNRS, Centrale Lille, CNRS - UMR 9189 - CRIStAL, Univ. Inria, Univ. Lille, CNRS, Centrale Inria, UMR 9189 - CRIStAL Lille, Centrale Lille, Inria Lille, UMR 9189 - CRIStAL France France France [email protected] [email protected] [email protected] Vincent Aranega Stéphane Ducasse Univ. Lille, CNRS, Centrale Lille, Inria, Univ. Lille, CNRS, Centrale Inria, UMR 9189 - CRIStAL Lille, UMR 9189 - CRIStAL France France [email protected] [email protected] Abstract Studies and work on debugging acknowledge that main- Debugging is one of the most important and time consuming stream debuggers are not well adapted to several debugging activities in software maintenance, yet mainstream debuggers scenarios [3, 27, 31]. This has led to the appearance of new de- are not well-adapted to several debugging scenarios. This bugging techniques proposing to augment traditional interac- has led to the research of new techniques covering specific tive debuggers with, e.g., stateful breakpoints [4], control-flow families of complex bugs. Notably, recent research proposes aware breakpoints [5], object-centric breakpoints [10, 34], the to empower developers with scripting DSLs, plugin-based and automatic insertion of breakpoints based on dynamic execu- moldable debuggers. However, these solutions are tailored to tions [45], or declarative statements from the developer [21]. specific use-cases, or too costly for one-time-use scenarios. A line of research has also started to study scripting APIs to In this paper we argue that exposing a debugging scripting empower developers to implement debugging scripts adapted interface in mainstream debuggers helps in solving many chal- to their needs.
    [Show full text]