Web development, as you it

Transcription

1 Web development, as you it

2 Lukas Renggli Academics PhD Student, University of Bern Industry Independent Software Consultant Communities Core-developer of Seaside Author of Magritte and Pier

3 Agenda Natural Flow Reusable Components Secure by Default Web 2.0 Applications

4 Natural Flow

5 Demo

6 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form>

7 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form> <form action="result.html"> <input type="text" name="value2"> <input type="submit" value="ok"> </form>

8 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form> <form action="result.html"> <input type="text" name="value2"> <input type="submit" value="ok"> </form> <p> <% value1 + value2 %> </p>

9 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form> <form action="result.html"> <input type="text" name="value2"> <input type="submit" value="ok"> </form> <p> <% value1 + value2 %> </p>

10 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form> <form action="result.html"> <input type="text" name="value2"> <input type="submit" value="ok"> </form> <p> <% value1 + value2 %> </p>

11 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form> <form action="result.html"> <input type="text" name="value2"> <input type="submit" value="ok"> </form> <p> <% value1 + value2 %> </p>

12 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form> <form action="result.html"> <input type="hidden" name="value1" value="<% value1 %>"> <input type="text" name="value2"> <input type="submit" value="ok"> </form> <p> <% value1 + value2 %> </p>

13 <form action="second.html"> <input type="text" name="value1"> <input type="submit" value="ok"> </form> <form action="result.html"> <input type="hidden" name="value1" value="<% value1 %>"> <input type="text" name="value2"> <input type="submit" value="ok"> </form> <p> <% value1 + value2 %> </p>

14 Web Browser

15 Web Browser

16 /first parsing processing formatting Web Browser

17 /first parsing processing formatting value1 Web Browser

18 /first parsing processing formatting value1 /second parsing processing formatting value1 Web Browser

19 /first parsing processing formatting value1 /second parsing processing formatting value1 value1, value2 Web Browser

20 /first parsing processing formatting value1 /second parsing processing formatting value1 value1, value2 /result parsing processing formatting result Web Browser

21 Who cares about HTTP anyway?

22

23

24 is different

25 Concentrate on your application...

26 ... no manual request parsing

27 ... no XML configuration files

28 3 user interactions

29 3 lines of code

30

31 value1 := self request: First Number.

32 value1 := self request: First Number. value2 := self request: Second Number.

33 value1 := self request: First Number. value2 := self request: Second Number. self inform: value1 + value2.

34 Demo

35 Reusable Components

36 We don t think in pages...

37 ..., but in stateful components

38 Demo

39 Demo

40 Components are c!!l

41 Reuseable

42 Model View Controller Model, View, Controller

43 Persistent

44 Valid Source: stock.xchng, Al Nakib

45 CSS Designer

46 XHTML Developer & Seaside

47 DRY Don't Repeat Yourself

48 Domain Specific Language

49 html div id: title ; with: Title <div id= title >Title</div>

50 html div id: list ; with: [ html span class: item ; with: Item 1. html span class: item ; with: Item 2 ] <div id= list > <span class= item >Item 1</span> <span class= item >Item 2</span> </div>

51 Demo

52 Secure by Default

53 Cross Site Scripting Source: stock.xchng, Afonso Lima

54 Output is encoded by default

55 html text: '<script>alert(''xss'')</script>' <script>alert('xss');</script>

56 Replay Attacks Source: stock.xchng, Afonso Lima

57 Session _s=ru8zkgqjy0udx3kf 96-bit

58 Page _k=k5eqyqke 48-bit

59 Parameter Tampering Source: stock.xchng, Afonso Lima

60 Names are generated automatically

61 Names are bound to functions

62 No manual request parsing

63 Don t call Seaside, Seaside will call you Source: stock.xchng, Pawel Zawistowski

64 html anchor! callback: [ self inform: Hello World ];! with: Show Message <a href= /seaside/example1 "?_s=ru8zkgqjy0udx3kf " &_k=k5eqyqke! &32 >Show Message</a>

65

66 Web 2.0

67 Source: Flickr, Benjamin Jackson

68 AJAX Source: Flickr, Benjamin Jackson

69 Tight, but optional integration

70 Feature complete and up-to-date

71 Say it in Smalltalk

72 Source: Flickr, psrman's

73 Comet Source: Flickr, psrman's

74 Demo scriptaculous.seasidehosting.st

75 Applications

76 In productive use since 2002

77

78

79 Demo

80

81 Seaside

82 MIT License

83

84