Assessing reusable web applications: The Django ecosystem case

The article provides a comparative analysis of web frameworks based on the Python programming language. The right choice of a software development tool will allow developers to speed up the process of designing and software implementation of web resources. With the development of programming languages, solutions have begun to appear that make it easier for programmers to create web applications. In recent years, many tools of this type have been developed, including web frameworks. Some of them are used to develop small web applications, and other frameworks are used to create large-scale systems. The existing web frameworks differ from each other, but choosing them can be a difficult task for a programmer. Therefore, it is necessary to specify several parameters that are common to frameworks, according to which the desired web framework should be selected. The selected criteria make it possible to evaluate the frameworks more qualitatively and more objectively and speed up the process of design and software implementation of web resources. Due to the high demand for web applications, developers need to develop cost-effective, secure and well-coded web applications. Analyzing the Django framework, it can be argued that it is the most popular for web development, written in the Python programming language and using the MVC architecture. It is ideal for application projects with limited time and a small budget. If the application is not very voluminous and only simple URL routing and templates with a simple context are needed, then the Flask framework can be used instead of Django. The framework for building a Flask application in the resulting HTML files contains additional tags and scripts. The mechanism of work of processing forms also works differently. Flask stores more information about form fields on pages. The size of HTML files created using the Flask framework turns out to be significantly larger.

Modern and Responsive Mobile-enabled Web Applications

Modern web applications use complex data models and access control rules which lead to data integrity and access control errors. One approach to find such errors is to use formal verification techniques. However, as a first step, most formal verification techniques require extraction of a formal model which is a difficult problem in itself due to dynamic features of modern languages, and it is typically done either manually, or using ad hoc techniques. In this paper, we present a technique called symbolic model extraction for extracting formal data models from web applications. The key ideas of symbolic model extraction are 1) to use the source language interpreter for model extraction, which enables us to handle dynamic features of the language, 2) to use code instrumentation so that execution of each instrumented piece of code returns the formal model that corresponds to that piece of code, 3) to instrument the code dynamically so that the models of methods that are created at runtime can also be extracted, and 4) to execute both sides of branches during instrumented execution so that all program behaviors can be covered in a single instrumented execution. We implemented the symbolic model extraction technique for the Rails framework and used it to extract data and access control models from web applications. Our experiments demonstrate that symbolic model extraction is scalable and extracts formal models that are precise enough to find bugs in real-world applications without reporting too many false positives.

This research investigates how the visibility benefits of the REST architectural style can be pre- served through the use of generalized hypermedia controls without sacrificing user experience in web applications. JavaScript, an implementation of the code-on-demand constraint of REST, has been used to enable rich user experiences on the World Wide Web (WWW) but its use has increasingly become detrimental to visibility in modern web applications. We review the benefits provided by visibility to the WWW and the tension between visibility and code-on-demand. The concept of generalized hypermedia controls is presented and we demonstrate how generalized hypermedia controls preserve visibility while enabling a rich user experience in real-world web applications.

The purpose of the article is to study and analyze various components of the Full Stack JavaScript concept and to consider common problems and prospects for developing a prototype educational web application based on it. The research methods are the main methodological approaches and technological tools for the development of intelligent learning systems with elements of gamification based on the use of an appropriate multi-level ontological model. These methods include, in particular: systemic and comparative analyses to identify the features of creating scalable and high-performance web applications; the method of expert evaluation, which involves analyzing literature and information resources, conducting interviews and surveys of experts, as well as the processes of developing and testing scalable and high-performance web applications. The scientific novelty of the research is the analysis of modern technologies for the development of online educational process support platforms, the results of which can be used in the preparation of their e-learning support software product, which is a user’s assistant in the process of studying the relevant educational content, and may even become an independent unit – an online course. Conclusions. The paper investigates the existing views on the modern approach to the development of high-performance websites using the main components of the Full Stack JavaScript concept: Node.js, Express and MongoDB. The strengths and weaknesses of well-known e-learning support platforms are analyzed. This analysis led to the choice of the Full Stack JavaScript concept for the development of modern web applications. We used technologies such as HTML, CSS, and JavaScript for front-end development. For backend development, we used Node.js together with Express. The MongoDB database was used to store data (as documents). The proposed approach to developing a prototype of an educational web application has demonstrated the possibility of such an implementation of each component of Full Stack JavaScript when the web application provides minimalistic functions of an online learning platform, achieving the required level of both educational content and the level of competencies that users of the application can potentially obtain. The Full Stack JavaScript concept provides one of the best solutions for developing modern web applications, reducing the separation between frontend and backend and facilitating development flexibility. This allows you to create scalable and high-performance educational web applications using a single language. Considering the results of this analysis, a decision has been made to develop a prototype of an educational web application based on the Full Stack JavaScript concept that would provide minimalistic functions of an online learning platform.

This paper presents F4F (Framework For Frameworks), a system for effective taint analysis of framework-based web applications. Most modern web applications utilize one or more web frameworks, which provide useful abstractions for common functionality. Due to extensive use of reflective language constructs in framework implementations, existing static taint analyses are often ineffective when applied to framework-based applications. While previous work has included ad hoc support for certain framework constructs, adding support for a large number of frameworks in this manner does not scale from an engineering standpoint. F4F employs an initial analysis pass in which both application code and configuration files are processed to generate a specification of framework-related behaviors. A taint analysis engine can leverage these specifications to perform a much deeper, more precise analysis of framework-based applications. Our specification language has only a small number of simple but powerful constructs, easing analysis engine integration. With this architecture, new frameworks can be handled with no changes to the core analysis engine, yielding significant engineering benefits. We implemented specification generators for several web frameworks and added F4F support to a state-of-the-art taint-analysis engine. In an experimental evaluation, the taint analysis enhanced with F4F discovered 525 new issues across nine benchmarks, a harmonic mean of 2.10X more issues per benchmark. Furthermore, manual inspection of a subset of the new issues showed that many were exploitable or reflected bad security practice.

Pro Spring MVC provides in-depth coverage of Spring MVC and Spring Web Flow, two highly customizable and powerful web frameworks brought to you by the developers and community of the Spring Framework. Spring MVC is a modern web application framework built upon the Spring Framework, and Spring Web Flow is a project that complements Spring MVC for building reusable web controller modules that encapsulate rich page navigation rules. Along with detailed analysis of the code and functionality, plus the first published coverage of Spring Web Flow 2.x, this book includes numerous tips and tricks to help you get the most out of Spring MVC, Spring Web Flow, and web development in general. Spring MVC and Spring Web Flow have been upgraded in the new Spring Framework 3.1 and are engineered with important considerations for design patterns and expert object-oriented programming techniques. This book explains not only the design decisions of the frameworks, but also how you can apply similar designs and techniques to your own code. This book takes great care in covering every inch of Spring MVC and Spring Web Flow to give you the complete picture. Along with all the best known features of these frameworks, youll discover some new hidden treasures. Youll also learn how to correctly and safely extend the frameworks to create customized solutions. This bookis for anyone who wishes to write robust, modern, and useful web applications with the Spring Framework. What youll learn Key Spring Framework fundamentals How to use the Spring MVC architecture How to develop with the DispatcherServlet How to write Controllers How to work with Resolving and Implementing Views What are the supported View Types How to customize your website What isand how to use the Spring Web Flow framework How to test your Spring MVC applications How to implement Spring Security Who this book is for This book is for Spring or Java EE application developers who want to learn and fully leverage Spring's Web-tier creator and framework, Spring MVC. This book is also for experienced enterprise and Java programmers who are new to the Spring Framework. Table of Contents Configuring a Spring Development Environment Spring Framework Fundamentals Web Application Architecture Spring MVC Architecture Implementing Controllers Implementing Controllers Advanced REST and AJAX Resolving and Implementing Views Testing Spring MVC Applications Spring Web Flow Building Applications with Spring Web Flow Advanced Spring Web Flow Spring Security Cloud Foundry - Deploying to the Cloud

Memory leaks in web applications are pervasive and difficult to debug. Leaks degrade responsiveness by increasing garbage collection costs and can even lead to browser tab crashes. Previous leak detection approaches designed for conventional applications are ineffective in the browser environment. Tracking down leaks currently requires intensive manual effort by web developers, which is often unsuccessful. This paper introduces BLEAK (Browser Leak debugger), the first system for automatically debugging memory leaks in web applications. BLEAK'S algorithms leverage the observation that in modern web applications, users often repeatedly return to the same (approximate) visual state (e.g., the inbox view in Gmail). Sustained growth between round trips is a strong indicator of a memory leak. To use BLEAK, a developer writes a short script (17-73 LOC on our benchmarks) to drive a web application in round trips to the same visual state. BLEAK then automatically generates a list of leaks found along with their root causes, ranked by return on investment. Guided by BLEAK, we identify and fix over 50 memory leaks in popular libraries and apps including Airbnb, AngularJS, Google Analytics, Google Maps SDK, and jQuery. BLEAK'S median precision is 100%; fixing the leaks it identifies reduces heap growth by an average of 94%, saving from 0.5MB to 8MB per round trip.

Web application development from simple web pages to complex interactive platforms (including social networks, e-commerce systems, corporate portals) requires new approaches, tools and technologies. JavaScript libraries and frameworks play a special role in developing web applications, simplifying the creation of effective, scalable, and convenient interfaces. The purpose of the article is to research the problems and prospects of using React in combination with Redux when creating web applications with a complex structure, to assess the advantages of their joint use in comparison with similar tools and to develop the web application “FarmerProducts”. The research methodology consists of the main methodological approaches and technological tools for developing web applications. Such methods, in particular, are: system and comparative analysis – to identify the features of creating web applications; method of expert assessments, which involves the study of literary sources and information resources, conducting interviews and surveys of experts, as well as the processes of developing and testing scalable and high-performance web applications based on the use of React and Redux. The scientific novelty of the research is the analysis of modern tools (React, Angular, Vue. js) for developing web applications, identifying problems and prospects for their use, creating an author’s web application (using React and Redux), which includes an intuitive interface, a flexible database, simplifying the process of working with the application by using a stack of modern technologies. Conclusions. The paper analyses the problems and prospects of using modern web application development tools; focuses on React, which is suitable for different projects; conducts a comparative analysis of React with Angular, Vue. js and Svelte, identifies their main characteristics, advantages, disadvantages; demonstrates the dependence of the choice of tools on the project context (React in combination with Redux can provide an optimal balance between performance, flexibility and scalability); describes the author’s web application – the FarmerProducts online store; identifies further ways to improve this web application.

This article presents a comparative analysis of the performance of Node.js and Bun platforms in the context of developing educational web applications. Modern educational information systems are increasingly implemented as web applications, requiring high performance, scalability, and efficient resource utilization. With the emergence of Bun, a new platform positioned as a faster alternative to Node.js, there is a need for scientific investigation of its capabilities, advantages, and limitations in practical application. This study describes an experimental evaluation of a web application’s performance on both platforms and discusses the feasibility of migrating from Node.js to Bun. A roadmap for migrating a web application from Node.js to Bun is also developed. The research involved a series of load tests conducted using the Bombardier utility. Experiments were performed in the Google Cloud Platform (GCP) cloud environment using a standardized test configuration, enabling an objective performance assessment of each platform. The test results demonstrated a significant advantage of Bun over Node.js in terms of the average number of HTTP requests processed per second (RPS). Bun showed a 2.14-fold performance increase, processing an average of 8038 requests per second compared to 3753 requests for Node.js. However, certain compatibility issues between Bun and some modules were identified, necessitating modifications to the web application’s code. This suggests that while Bun holds considerable potential for web development, it is still under active development, and the migration process might require additional effort to adapt the application code. The obtained results are valuable for developers of educational web applications, as the choice of runtime environment directly impacts application performance, access speed to materials, and system scalability. Promising areas for future research include analyzing Bun’s stability in long-term use, its compatibility with existing modules, and optimization under real-world high-load conditions.

Expert Spring MVC and Web Flow provides in-depth coverage of Spring MVC and Spring Web Flow, two highly customizable and powerful web frameworks brought to you by the developers and community of the Spring Framework. Spring MVC is a modern web application framework built upon the Spring Framework, and Spring Web Flow is a new project that compliments Spring MVC for building reusable web controller modules that encapsulate rich page navigation rules. Along with detailed analysis of the code and functionality, plus the first-published coverage of Spring Web Flow, this book includes numerous tips and tricks to help you get the most out of Spring MVC, Spring Web Flow, and web development in general. Spring MVC and Spring Web Flow are engineered with an important consideration for design patterns and expert object oriented programming techniques. This book explains not only the design decisions of the frameworks, but also how you can apply similar designs and techniques to your own code. This book takes great care in covering every inch of Spring MVC and Spring Web Flow to give you the complete picture. Along with all the best known features of these frameworks, youll discover some new hidden treasures. Youll also learn how to correctly and safely extend the frameworks to create customized solutions. From beginner to expert, this book is for anyone who wishes to write robust, modern, and useful web applications with the Spring Framework. Table of Contents Introduction Spring Fundamentals Spring MVC Application Architecture Jump into Spring MVC The Processing Pipeline The Controller Menagerie The View Layer Supported View Types Validation Testing Spring MVC Applications Introduction to Spring Web Flow Advanced Spring Web Flow

CAPTCHA is an acronym of Completely Automated Turing Test to Tell Computers and Humans Apart which is also referred to as HIP (Human Interaction Proof). It is a computer program that generates challenges or tests that only humans can solve and the machines or automated software cannot solve. CAPTCHAs are used in various Web Applications to restrict bots from doing unwanted activities in areas of protected content and unwanted submissions of web forms. In this paper a Model for Multilingual CAPTCHA challenges which can be more accessible and easy to use for non-English users is proposed. Rendering CAPTCHA tests in regional languages can improve usability and accessibility for non-native speakers of English language. The suggested model can be implemented in all major web programming languages such as PHP, .NET, J2EE, Perl, Ruby etc. I. INTRODUCTION The websites and web applications using CAPTCHA may be usually targeted for a large audience nationally or globally and not limited to a particular location or city. The websites and web applications are therefore used by people with knowledge of different languages and scripts including but not limited to English. Modern websites and web applications and designed in a way that the users can use them in their own languages. In India, there are 22 officially recognized languages and 12 different scripts. Majority of people in India have knowledge of and use their regional languages are not well versed in English. More and more websites and web applications for India are providing content and user interface in the regional languages of India. Many of these websites and web applications contain resources and areas protected by CAPTCHAs. The Government of India has also issued several guidelines for using Hindi and other regional languages in the websites of Government Departments. More and more Govt. Departmental websites are providing content in regional languages. The CAPTCHAs used in these Websites and web applications are English only even if the users choose to use them in a non-English regional language. This leads to very poor accessibility and usability of these websites.

This paper presents F4F (Framework For Frameworks), a system for effective taint analysis of framework-based web applications. Most modern web applications utilize one or more web frameworks, which provide useful abstractions for common functionality. Due to extensive use of reflective language constructs in framework implementations, existing static taint analyses are often ineffective when applied to framework-based applications. While previous work has included ad hoc support for certain framework constructs, adding support for a large number of frameworks in this manner does not scale from an engineering standpoint.

Web applications represent an important category of applications that owe much of their popularity to the ubiquitous accessibility using standard web browsers. The complexity of web applications is steadily increasing since the inception of the Internet and the way it is perceived changes from a pure information source to a platform for applications. Many different web frameworks exist that support recurring and tedious development tasks in order to simplify the process of building web applications. Most of the currently available web frameworks adhere to the widely accepted Model 2 design pattern that targets a clean separation of model, view and controller parts of an application in the sense of MVC. Nevertheless, existing frameworks are conceived to work with standard object-oriented business applications only and do not respect the particularities and possibilities of agent applications. Hence, in this paper a new architecture, in accordance with the Model 2 design pattern, is proposed that is able to combine the strengths of agent-based computing with web interactions. This architecture is the basis for the Jadex Webbridge framework, which enables a seamless integration of the Jadex BDI framework with state-of-the art JSP technology. The usage of web technology in combination with agents is further exemplified by an electronic bookstore case study.

A Metadata Approach for Building Web Application User Interface