Towards Language Parametric Web-Based Development Environments
Total Page:16
File Type:pdf, Size:1020Kb
Load more
Recommended publications
-
On the Incoherencies in Web Browser Access Control Policies
On the Incoherencies in Web Browser Access Control Policies Kapil Singh∗, Alexander Moshchuk†, Helen J. Wang† and Wenke Lee∗ ∗Georgia Institute of Technology, Atlanta, GA Email: {ksingh, wenke}@cc.gatech.edu †Microsoft Research, Redmond, WA Email: {alexmos, helenw}@microsoft.com Abstract—Web browsers’ access control policies have evolved Inconsistent principal labeling. Today’s browsers do piecemeal in an ad-hoc fashion with the introduction of new not have the same principal definition for all browser re- browser features. This has resulted in numerous incoherencies. sources (which include the Document Object Model (DOM), In this paper, we analyze three major access control flaws in today’s browsers: (1) principal labeling is different for different network, cookies, other persistent state, and display). For resources, raising problems when resources interplay, (2) run- example, for the DOM (memory) resource, a principal is time changes to principal identities are handled inconsistently, labeled by the origin defined in the same origin policy and (3) browsers mismanage resources belonging to the user (SOP) in the form of <protocol, domain, port> [4]; but principal. We show that such mishandling of principals leads for the cookie resource, a principal is labeled by <domain, to many access control incoherencies, presenting hurdles for > web developers to construct secure web applications. path . Different principal definitions for two resources are A unique contribution of this paper is to identify the com- benign as long as the two resources do not interplay with patibility cost of removing these unsafe browser features. To do each other. However, when they do, incoherencies arise. For this, we have built WebAnalyzer, a crawler-based framework example, when cookies became accessible through DOM’s for measuring real-world usage of browser features, and used “document” object, DOM’s access control policy, namely the it to study the top 100,000 popular web sites ranked by Alexa. -
Cross-Domain Embedding for Vaadin Applications
Cross-Domain Embedding for Vaadin Applications Janne Lautamäki and Tommi Mikkonen Department of Software Systems, Tampere University of Technology, Korkeakoulunkatu 1, FI-33720 Tampere, Finland {janne.lautamaki,tommi.mikkonen}@tut.fi Abstract. Although the design goals of the browser were originally not at running applications or at displaying a number of small widgets on a single web page, today many web pages considerably benefit from being able to host small embedded applications as components. While the web is full such applications, they cannot be easily reused because of the same origin policy restrictions that were introduced to protect web content from potentially malicious use. In this paper, we describe a generic design for cross domain embedding of web applications in a fashion that enables loading of applications from different domains as well as communication between the client and server. As the proof- of-concept implementation environment, we use web development framework Vaadin, a Google Web Toolkit based system that uses Java for application development. Keywords: Vaadin, JSONP, cross-domain applications. 1 Introduction Web applications – systems that resemble desktop applications in their behavior but are run inside the browser – are becoming increasingly common. The current trend is that web pages have dynamic components side by side with the traditional web content, such as static text and images. These dynamic components can be small widgets that for instance display current weather information or stock exchange data, or even full-fledged web applications that offer a service related to the theme of the web page where they are located [1]. Creating dynamic web pages is much more complex than building plain old web pages. -
Chapter 1 Web Basics and Overview
Chapter 1 Web Basics and Overview The Web is an Internet-based distributed information system. Anyone with a computer connected to the Internet can easily retrieve information by giving a Web address or by simply clicking a mouse button. The Web is a great way to disseminate information and making it available 24/7. Information can also be collected from Web users and customers through online forms. Maintainers and administrators can control and update Web content from anywhere on the Web. All these make the Web a powerful tool for mass communication, e-business and e-commerce. Compared with TV, radio, news papers, and magazines, putting the word out on the Web is relatively simple and inexpensive. But a website is much more than such one-way communication media. It can be a virtual o±ce or store that is always open and supported by workers from anywhere. Web service companies o®er free Web space and tools to generate simple personal or even business Web pages. But, well-designed and professionally implemented websites are much more involved. Even then, expertly produced websites are still much more cost-e®ective than other means of mass communication. For business and commerce, the cost of a website is negligible when compared to building and operating a brick-and-mortar o±ce or store. Once in-place, a website is a store that never closes and that is very attractive. People take great pains in building an o±ce or store to project the right image and to serve the needs 7 8 CHAPTER 1. -
Web Pages Are Stored on Web Server and Can Be Viewed Using a Web Browser
WWEEBB PPAAGGEESS http://www.tutorialspoint.com/internet_technologies/web_pages.htm Copyright © tutorialspoint.com Web Page web page is a document available on world wide web. Web Pages are stored on web server and can be viewed using a web browser. A web page can cotain huge information including text, graphics, audio, video and hyper links. These hyper links are the link to other web pages. Collection of linked web pages on a web server is known as website. There is unique Uniform Resource Locator URL is associated with each web page. Static Web page Static web pages are also known as flat or stationary web page. They are loaded on the client’s browser as exactly they are stored on the web server. Such web pages contain only static information. User can only read the information but can’t do any modification or interact with the information. Static web pages are created using only HTML. Static web pages are only used when the information is no more required to be modified. Dynamic Web page Dynamic web page shows different information at different point of time. It is possible to change a portaion of a web page without loading the entire web page. It has been made possible using Ajax technology. Server-side dynamic web page It is created by using server-side scripting. There are server-side scripting parameters that determine how to assemble a new web page which also include setting up of more client-side processing. Client-side dynamic web page It is processed using client side scripting such as JavaScript. -
How Web Browsers Work HTTP: “Definition: HTTP
How web browsers work http://www.webdevelopersnotes.com/basics/how_do_web_browser_work.php HTTP: HTTP 1.0 document from 1990 http://www.w3.org/Protocols/HTTP/1.0/spec.html “Definition: HTTP - the Hypertext Transfer Protocol - provides a standard for Web browsers and servers to communicate. The definition of HTTP is a technical specification of a network protocol that software must implement. HTTP is an application layer network protocol built on top of TCP. HTTP clients (such as Web browsers) and servers communicate via HTTP request and response messages. The three main HTTP message types are GET, POST, and HEAD. HTTP utilizes TCP port 80 by default, though other ports such as 8080 can alternatively be used……. “ http://compnetworking.about.com/od/networkprotocols/g/bldef_http.htm HTTPS The secure hypertext transfer protocol (HTTPS) is a communications protocol designed to transfer encrypted information between computers over the World Wide Web. HTTPS is http using a Secure Socket Layer (SSL). A secure socket layer is an encryption protocol invoked on a Web server that uses HTTPS. Most implementations of the HTTPS protocol involve online purchasing or the exchange of private information. Accessing a secure server often requires some sort of registration, login, or purchase. The successful use of the HTTPS protocol requires a secure server to handle the request. http://msdn.microsoft.com/en-us/library/aa767735(v=vs.85).aspx HTML HyperText Markup Language is used for describing web documents (web pages) so that they can be correctly displayed. A markup language is a set of markup tags HTML documents are described by HTML tags Each HTML tag describes different document content http://www.w3schools.com/html/html_intro.asp Static Web Page A web page that uses only HTML does not change its appearance or its data and is therefore always a static webpage URI and URL In computing, a uniform resource identifier (URI) is a string of characters used to identify a name of a resource. -
Skill Language Server
Institute of Software Technology University of Stuttgart Universitätsstraße 38 D–70569 Stuttgart Bachelorarbeit SKilL Language Server Johannes Schäufele Course of Study: Informatik Examiner: Prof. Dr. Erhard Plödereder Supervisor: Dipl.-Inf. Felix Krause, Dr. Timm Felden Commenced: April 9, 2018 Completed: October 9, 2018 Abstract Language analysis features offered by integrated development environments (IDEs) can ease and accelerate the task of writing code, but are often not available for domain-specific languages. The Language Server Protocol (LSP) aims to solve this problem by allowing language servers that support these features for a certain programming language to be used portably in a number of IDEs. A language server for Serialization Killer Language (SKilL) was implemented that supports a multitude of language features including automatic formatting, completion suggestions, and display of references and documentation associated with symbols. This thesis presents how the language server was implemented and discusses associated challenges that arose due to the nature of the SKilL and LSP specification. 3 Kurzfassung Sprachunterstützungen von IDEs können Programmierern ihre Arbeit deutlich erleichtern, jedoch werden diese oft nicht für domänenspezifische Sprachen unterstützt. Das LSP erlaubt Unterstützun- gen für eine Sprache durch einen Language Server zu implementieren, der anschließend in einer Vielzahl an IDEs nutzbar ist. Es wurde ein Language Server für SKilL implementiert, mit dem unter anderem Code automatisch formatiert, Vervollständigungen vorgeschlagen sowie Verweise und Dokumentation angezeigt werden kann. In dieser Ausarbeitung wird das Vorgehen und dabei aufgekommene Herausforderungen durch die SKilL und LSP Spezifikation diskutiert. 4 Contents 1 Introduction 7 1.1 Motivation ...................................... 7 1.2 Outline ....................................... 7 2 The Language Server Protocol 9 2.1 Overview ..................................... -
An LSP Infrastructure to Build EMF Language Servers for Web-Deployable Model Editors⋆
An LSP infrastructure to build EMF language servers for Web-deployable model editors? Roberto Rodriguez-Echeverria1, Javier Luis Canovas´ Izquierdo2, Manuel Wimmer3, and Jordi Cabot4 1 Quercus SEG, Universidad de Extremadura, Caceres,´ Spain [email protected] 2 UOC, Barcelona, Spain [email protected] 3 CDL-MINT, TU Wien, Vienna, Austria [email protected] 4 ICREA – UOC, Barcelona, Spain [email protected] Abstract. The development of modern IDEs is still a challenging and time- consuming task, which requires implementing the support for language-specific features such as syntax highlighting or validation. When the IDE targets a graph- ical language, its development becomes even more complex due to the rendering and manipulation of the graphical notation symbols. To simplify the development of IDEs, the Language Server Protocol (LSP) proposes a decoupled approach based on language-agnostic clients and language-specific servers. LSP clients communicate changes to LSP servers, which validate and store language in- stances. However, LSP only addresses textual languages (i.e., character as atomic unit) and neglects the support for graphical ones (i.e., nodes/edges as atomic units). In this paper, we introduce a novel LSP infrastructure to simplify the de- velopment of new graphical modeling tools, in which Web technologies may be used for editor front-ends while leveraging existing modeling frameworks to build language servers. More concretely, in this work, we present the architecture of our LSP infrastructure, based on LSP4J, to build EMF-based graphical language servers. Keywords: Domain-Specific Languages, Language Server Protocol, Modeling Editors 1 Introduction In the last years, there is an increasing interest to move the modeling editing support to the Web (e.g., Eclipse Che5 or Theia6), which gives new opportunities, but at the same time, opens new risks and challenges. -
World Wide Web
World Wide Web Introduction to networking Dr. Klára Pešková, [email protected] Department of Software and Computer Science Education 1 / 32 Feel free to contact me: ● Join a Zoom meeting during an officially scheduled lecture ● E-mail me Assignment You can find the “Simple Static Web” assignment in ReCodEx. Your goal is to create a simple static web, the specification of this assignment in ReCodEx is quite detailed. You will be rewarded by one point if your solution meets the required criteria. Except for ReCodEx, the assignment has to be approved by myself. Your web page has to look like a real web page, it is not enough to just stack the mandatory elements with no concept. You will find my comments to your solution directly in ReCodEx. If your solution is approved, I will reward you one extra point. You need to get 1+1 points to be able to take the “Introduction to networking” test. WWW – World Wide Web ● WWW is the most used Internet service ● Started as an experiment in CERN ● Last year’s description – Platform for information and data exchange – Environment for applications, that are accessible from anywhere ● This year – Social interactions – Shopping – Culture – Studying – Entertainment … Introduction to networking (2020) 2 / 32 World Wide Web and Internet are not the same. Web is one of the Internet’s (most used) services. Ancient history ● 1945 – Vannevar Bush – Human brain works with associations – hypothetical electromechanical device Memex – "enlarged intimate supplement to one's memory", bookmark list of static microfilm pages ● ‘60s – Theodore Nelson first used the word hyper-text, i.e. -
Static Web Page Designing Course Code: 3320703
Static Web Page Designing Course Code: 3320703 GUJARAT TECHNOLOGICAL UNIVERSITY, AHMEDABAD, GUJARAT COURSE CURRICULUM Course Title: Static Web Page Designing (Course Code: 3320703) Diploma Programmes in which this course is offered Semester in which offered Second Semester Computer Engineering, Information Technology 1. RATIONALE Today various technologies are available for developing web-based applications. These technologies can be equally used for developing both web based educational and business applications. These technologies are required for developing online educational applications such as organizational websites, educational website, virtual learning environments etc. and business applications in various fields such as products sale, banking, railways reservation, services etc. Therefore it is important that the students of polytechnics develop competency to use Hyper Text Markup Language (HTML) technologies for developing professional static web environment. This course would be the basis for developing dynamic web pages which will be taught in latter semesters. 2. COMPETENCY The course content should be taught and implemented with the aim to develop different types of skills so that students are able to acquire following competency: Develop and host a static website using Hyper Text Markup Language with web technology features like Cascading Style Sheets etc. 3. TEACHING AND EXAMINATION SCHEME Teaching Scheme Total Credits Examination Scheme (L+T+P) Total (In Hours) Theory Marks Practical Marks Marks L T P C ESE PA ESE PA 100 0 0 4 4 00 00 40 60 Legends: L-Lecture; T – Tutorial/Teacher Guided Student Activity; P - Practical; C – Credit;; ESE - End Semester Examination; PA - Progressive Assessment. Note: It is the responsibility of the institute heads that marks for PA of theory & ESE and PA of practical for each student are entered online into the GTU Portal at the end of each semester within the dates specified by GTU. -
Language-Independent Development Environment Support for Dynamic Runtimes
Language-Independent Development Environment Support for Dynamic Runtimes Daniel Stolpe Tim Felgentreff Christian Humer Hasso Plattner Institute Oracle Labs Oracle Labs University of Potsdam Potsdam, Germany Zurich, Switzerland Potsdam, Germany [email protected] [email protected] [email protected] potsdam.de Fabio Niephaus Robert Hirschfeld Hasso Plattner Institute Hasso Plattner Institute University of Potsdam University of Potsdam Potsdam, Germany Potsdam, Germany [email protected] [email protected] Abstract CCS Concepts • Software and its engineering → In- There are many factors for the success of a new programming tegrated and visual development environments; Soft- language implementation. Existing language implementa- ware maintenance tools. tion frameworks such as Truffle or RPython have focused Keywords Language Server Protocol, Truffle, Graal on run-time performance and security, or on providing a ACM Reference Format: comprehensive set of libraries. Daniel Stolpe, Tim Felgentreff, Christian Humer, Fabio Niephaus, The tools that language users need to be productive are and Robert Hirschfeld. 2019. Language-Independent Development also an important factor for the adoption of a programming Environment Support for Dynamic Runtimes. In Proceedings of language. The aforementioned frameworks, however, pro- the 15th ACM SIGPLAN International Symposium on Dynamic Lan- vide limited support for creating comprehensive develop- guages (DLS ’19), October 20, 2019, Athens, Greece. ACM, New York, ment tools. This is an impediment to language adoption that NY, USA, 11 pages. https://doi.org/10.1145/3359619.3359746 can be as serious as performance issues or lack of libraries. Both Truffle and RPython already provide run-time tools 1 Introduction such as for debugging, profiling, or coverage in a language- As use-cases evolve, so do programming languages to deal independent manner, but neither support static development with the rising complexity of modern software systems. -
Removing the Dependency Between Marketing Content and Application Code
A Technical White Paper by Percussion Software, Inc. INTEGRATING CM1 WITH WEB APPLICATIONS: Removing the Dependency Between Marketing Content and Application Code Percussion Software, Inc. • 600 Unicorn Park Drive, Woburn, Massachusetts 01801 • @ percussion • www.percussion.com • Tel. 781 438 9900 Integrating CM1 with Web Applications Contents Executive Summary ..................................................................................... 3 Going Mashable: Web Marketing vs. Web Applications ......................... 3 Mashable Application Integration - Overview .......................................... 4 Mashable Integration with CM1 - Two Approaches ................................. 6 Approach 1: Mashups with CM1 - New Applications. .............................. 6 Approach 2: Hybrid Server-side Mashups ............................................... 10 In Closing ................................................................................................... 12 About Percussion Software ...................................................................... 13 © Copyright 2012 Percussion Software, Inc. 2 Integrating CM1 with Web Applications Executive Overview Most Web Content Management (WCM) systems are general purpose web application frameworks on which the entire web presence is built. When integration is required, web developers are used to combining code and content together in one application framework. CM1 is different. It is content management “as an app” in itself that enables marketing to improve inbound traffic -
Language Server Protocol for Extendj
Language Server Protocol for ExtendJ Fredrik Siemund Daniel Tovesson D15, Lund University, Sweden C15, Lund University, Sweden [email protected] [email protected] Abstract ExtendJ extension outputs the errors in JSON format instead Microsoft’s Language Server Protocol (LSP) has been im- of a sequence of strings. Finally, the IDEs were configured plemented with ExtendJ in two widely popular Integrated to make use of the language server created. This improved Development Environments (IDE), Eclipse and Sublime Text. the process of developing in Java by providing the developer LSP is a way of supplying high level support — such as with better feedback in the editor. The work was evaluated code completion, hover tooltips, jump-to-definition and find- by demonstrating the validation features implemented in references — for a programming language in a wide variety the language server. The language server was tested with of editors. ExtendJ is an extensible compiler for Java, speci- Eclipse and Sublime Text, which both worked well. fied using reference attribute grammars. Because of thetime limit of the project, only error checking was implemented. As 2 Background the user writes Java code, the IDEs will highlight erroneous 2.1 Language Server Protocol code and thereby simplify the process of finding errors. On LSP is used to provide syntax highlighting and/or validation the client side, this was done by configuring two extensions, for a specific language. As mentioned8 in[ ], you need a client one for each IDE. On the server side, a language server was and a server. The client, in this case an IDE, sends notifica- created that compiles the file with ExtendJ every time itis tions to the server whenever some predefined events happen, changed by the user to search for compilation errors.