BLeak

Pro Spring MVC provides in-depth coverage of Spring MVC and Spring Web Flow, two highly customizable and powerful web frameworks brought to you by the developers and community of the Spring Framework. Spring MVC is a modern web application framework built upon the Spring Framework, and Spring Web Flow is a project that complements Spring MVC for building reusable web controller modules that encapsulate rich page navigation rules. Along with detailed analysis of the code and functionality, plus the first published coverage of Spring Web Flow 2.x, this book includes numerous tips and tricks to help you get the most out of Spring MVC, Spring Web Flow, and web development in general. Spring MVC and Spring Web Flow have been upgraded in the new Spring Framework 3.1 and are engineered with important considerations for design patterns and expert object-oriented programming techniques. This book explains not only the design decisions of the frameworks, but also how you can apply similar designs and techniques to your own code. This book takes great care in covering every inch of Spring MVC and Spring Web Flow to give you the complete picture. Along with all the best known features of these frameworks, youll discover some new hidden treasures. Youll also learn how to correctly and safely extend the frameworks to create customized solutions. This bookis for anyone who wishes to write robust, modern, and useful web applications with the Spring Framework. What youll learn Key Spring Framework fundamentals How to use the Spring MVC architecture How to develop with the DispatcherServlet How to write Controllers How to work with Resolving and Implementing Views What are the supported View Types How to customize your website What isand how to use the Spring Web Flow framework How to test your Spring MVC applications How to implement Spring Security Who this book is for This book is for Spring or Java EE application developers who want to learn and fully leverage Spring's Web-tier creator and framework, Spring MVC. This book is also for experienced enterprise and Java programmers who are new to the Spring Framework. Table of Contents Configuring a Spring Development Environment Spring Framework Fundamentals Web Application Architecture Spring MVC Architecture Implementing Controllers Implementing Controllers Advanced REST and AJAX Resolving and Implementing Views Testing Spring MVC Applications Spring Web Flow Building Applications with Spring Web Flow Advanced Spring Web Flow Spring Security Cloud Foundry - Deploying to the Cloud

Dynamic web development still borrows heavily from its origins in CGI scripts: modern web applications are largely designed and developed as programs that happen to output HTML. This thesis proposes to investigate the idea taking a mockup-centric approach instead, in which self-contained, full page web mockups are the central artifact driving the application development process. In some cases, these mockups are sufficient to infer the dynamic application structure completely.This approach to mockup driven development is made possible by the development of a language the thesis develops, called Cascading Tree Sheets (CTS), that enables a mockup to be annotated with enough information so that many common web development tasks and workflows can be eliminated or vastly simplified. CTS describes and encapsulates a web page's design structure the same way CSS describes its styles. This enables mockups to serve as the input of a web application rather than simply a design artifact. Using this capability, I will study the feasibility and usability of mockup driven development for a range of novice and expert authorship tasks. The thesis aims to finish by demonstrating that the functionality of a domain-specific content management system can be inferred automatically from site mockups.

Expert Spring MVC and Web Flow provides in-depth coverage of Spring MVC and Spring Web Flow, two highly customizable and powerful web frameworks brought to you by the developers and community of the Spring Framework. Spring MVC is a modern web application framework built upon the Spring Framework, and Spring Web Flow is a new project that compliments Spring MVC for building reusable web controller modules that encapsulate rich page navigation rules. Along with detailed analysis of the code and functionality, plus the first-published coverage of Spring Web Flow, this book includes numerous tips and tricks to help you get the most out of Spring MVC, Spring Web Flow, and web development in general. Spring MVC and Spring Web Flow are engineered with an important consideration for design patterns and expert object oriented programming techniques. This book explains not only the design decisions of the frameworks, but also how you can apply similar designs and techniques to your own code. This book takes great care in covering every inch of Spring MVC and Spring Web Flow to give you the complete picture. Along with all the best known features of these frameworks, youll discover some new hidden treasures. Youll also learn how to correctly and safely extend the frameworks to create customized solutions. From beginner to expert, this book is for anyone who wishes to write robust, modern, and useful web applications with the Spring Framework. Table of Contents Introduction Spring Fundamentals Spring MVC Application Architecture Jump into Spring MVC The Processing Pipeline The Controller Menagerie The View Layer Supported View Types Validation Testing Spring MVC Applications Introduction to Spring Web Flow Advanced Spring Web Flow

The purpose of the article is to study and analyze various components of the Full Stack JavaScript concept and to consider common problems and prospects for developing a prototype educational web application based on it. The research methods are the main methodological approaches and technological tools for the development of intelligent learning systems with elements of gamification based on the use of an appropriate multi-level ontological model. These methods include, in particular: systemic and comparative analyses to identify the features of creating scalable and high-performance web applications; the method of expert evaluation, which involves analyzing literature and information resources, conducting interviews and surveys of experts, as well as the processes of developing and testing scalable and high-performance web applications. The scientific novelty of the research is the analysis of modern technologies for the development of online educational process support platforms, the results of which can be used in the preparation of their e-learning support software product, which is a user’s assistant in the process of studying the relevant educational content, and may even become an independent unit – an online course. Conclusions. The paper investigates the existing views on the modern approach to the development of high-performance websites using the main components of the Full Stack JavaScript concept: Node.js, Express and MongoDB. The strengths and weaknesses of well-known e-learning support platforms are analyzed. This analysis led to the choice of the Full Stack JavaScript concept for the development of modern web applications. We used technologies such as HTML, CSS, and JavaScript for front-end development. For backend development, we used Node.js together with Express. The MongoDB database was used to store data (as documents). The proposed approach to developing a prototype of an educational web application has demonstrated the possibility of such an implementation of each component of Full Stack JavaScript when the web application provides minimalistic functions of an online learning platform, achieving the required level of both educational content and the level of competencies that users of the application can potentially obtain. The Full Stack JavaScript concept provides one of the best solutions for developing modern web applications, reducing the separation between frontend and backend and facilitating development flexibility. This allows you to create scalable and high-performance educational web applications using a single language. Considering the results of this analysis, a decision has been made to develop a prototype of an educational web application based on the Full Stack JavaScript concept that would provide minimalistic functions of an online learning platform.

Modern and Responsive Mobile-enabled Web Applications

Software forms a critical part of our lives today. Verifying software to avoid violations of safety and security properties is a necessary task. It is also imperative to have an assurance that the verification process was correct. We propose a human-centric approach to software verification. This involves enabling human-machine collaboration to detect vulnerabilities and to prove the correctness of the verification. We discuss two classes of vulnerabilities. The first class is Algorithmic Complexity Vulnerabilities (ACV). ACVs are a class of software security vulnerabilities that cause denial-of-service attacks. The description of an ACV is not known a priori. The problem is equivalent to searching for a needle in the haystack when we don't know what the needle looks like. We present a novel approach to detect ACVs in web applications. We present a case study audit from DARPA's Space/Time Analysis for Cybersecurity (STAC) program to illustrate our approach. The second class of vulnerabilities is Memory Leaks. Although the description of the Memory Leak (ML) problem is known, a proof of the correctness of the verification is needed to establish trust in the results. We present an approach inspired by the works of Alan Perlis to compute evidence of the verification which can be scrutinized by a human to prove the correctness of the verification. We present a novel abstraction, the Evidence Graph, that succinctly captures the verification evidence and show how to compute the evidence. We evaluate our approach against ML instances in the Linux kernel and report improvement over the state-of-the-art results. We also present two case studies to illustrate how the Evidence Graph can be used to prove the correctness of the verification.

The NERSC Web Toolkit (NEWT) brings High Performance Computing (HPC) to the web through easy to write web applications. Our work seeks to make HPC resources more accessible and useful to scientists who are more comfortable with the web than they are with command line interfaces. The effort required to get a fully functioning web application is decreasing, thanks to Web 2.0 standards and protocols such as AJAX, HTML5, JSON and REST. We believe HPC can speak the same language as the web, by leveraging these technologies to interface with existing grid technologies. NEWT presents computational and data resources through simple transactions against URIs. In this paper we describe our approach to building web applications for science using a RESTful web service. We present the NEWT web service and describe how it can be used to access HPC resources in a web browser environment using AJAX and JSON. We discuss our REST API for NEWT, and address specific challenges in integrating a heterogeneous collection of backend resources under a single web service. We provide examples of client side applications that leverage NEWT to access resources directly in the web browser. The goal of this effort is to create a model whereby HPC becomes easily accessible through the web, allowing users to interact with their scientific computing, data and applications entirely through such web interfaces.

This research investigates how the visibility benefits of the REST architectural style can be pre- served through the use of generalized hypermedia controls without sacrificing user experience in web applications. JavaScript, an implementation of the code-on-demand constraint of REST, has been used to enable rich user experiences on the World Wide Web (WWW) but its use has increasingly become detrimental to visibility in modern web applications. We review the benefits provided by visibility to the WWW and the tension between visibility and code-on-demand. The concept of generalized hypermedia controls is presented and we demonstrate how generalized hypermedia controls preserve visibility while enabling a rich user experience in real-world web applications.

Modern web applications are built on top of web frameworks, which offer benefits such as feature reuse and productivity improvement. By relying on web frameworks, developers can safely handle the multiple needs of real-world web applications. Despite the benefits of web frameworks, they are not intended to address all requirements to create web applications. In particular, the Django web framework provides a rich software ecosystem of reusable applications to support developers with advanced development aspects, such as modern authentication, caching, and deployment. However, currently, it is not clear what solutions developers can reuse or how active and reliable this ecosystem really is. To overcome this gap, this paper proposes an empirical study to assess the Django ecosystem of reusable applications. We analyze 487 reusable applications to understand their target domain, activity level, frequency of tests, and compatibility. We find that reusable applications are mostly concentrated in three categories: developer tools (27.8%), user interface (17.1%), and persistence (15.9%). Overall, these categories have distinct characteristics; for example, developer tools have the highest concentration of young and inactive applications, while persistence applications are the oldest. The reusable applications are 7.7 years old but have 10.17 months without commits, on the median. We also find that 80% of the reusable applications include the supported Python versions, 64% include the Django versions, and only 61% include both Python and Django versions. We detect that upgrading to recent versions of Django and Python may not be supported in some reusable applications, but compatibility issues become less problematic in recent Django and Python versions. Finally, based on our findings, we provide implications for practitioners and researchers.

Modern web applications use complex data models and access control rules which lead to data integrity and access control errors. One approach to find such errors is to use formal verification techniques. However, as a first step, most formal verification techniques require extraction of a formal model which is a difficult problem in itself due to dynamic features of modern languages, and it is typically done either manually, or using ad hoc techniques. In this paper, we present a technique called symbolic model extraction for extracting formal data models from web applications. The key ideas of symbolic model extraction are 1) to use the source language interpreter for model extraction, which enables us to handle dynamic features of the language, 2) to use code instrumentation so that execution of each instrumented piece of code returns the formal model that corresponds to that piece of code, 3) to instrument the code dynamically so that the models of methods that are created at runtime can also be extracted, and 4) to execute both sides of branches during instrumented execution so that all program behaviors can be covered in a single instrumented execution. We implemented the symbolic model extraction technique for the Rails framework and used it to extract data and access control models from web applications. Our experiments demonstrate that symbolic model extraction is scalable and extracts formal models that are precise enough to find bugs in real-world applications without reporting too many false positives.

In the rapid world of technology, web development faces a complex but significant challenge, particularly in the development of quality web applications. In many cases, end users often assess the quality of web applications based on their error-free performance and user-friendliness as well as enable users to perform tasks quickly anywhere and anytime on any computer devices. Thus, each and every quality issue in the phases of web development process plays a crucial role in the success of a web application and determining the right quality attributes or dimensions can be a challenge. The web development process, carried out in stages based on priorities, presents multiple challenges in communication, management, and teamwork within web development team environments which may adversely impact the overall quality of web applications. This research focuses on the influence of the web development process emphasising quality at each stage of creating high-quality web applications. This will then bring into case studies and quantitative metrics to produce a framework for the web development team to comprehend and adhere to the key quality principles of web application development.

The web has become closely ingrained with our life and massive effort for web development and maintenance continues to take place in an ad hoc manner, resulting in poor quality web systems and applications. Problems such as outdated or irrelevant information, difficulties in using the website, website crashes, and security breaches are common. We encounter these kinds of problems because web developers failed to address users' needs along with the improper appliance of the web engineering process in all its phases. As a consequence, web engineering and more precisely web requirements engineering is becoming of major importance in the web development process. In this context, this work tackles the validation of the navigational requirements of a web application. A methodology named NRVA is introduced in order to validate the navigational requirements for correctness, consistency, and completeness. It is based on the generation of an XML document defining the navigational rules of the application and used as input to the animator. The supporting tool to the approach does not only validate the correctness of the generated requirements, but also it aids to the elaboration and enhancement of those requirements through visualisation.

Information and Communication Technology (ICT) such as the World Wide Web (WWW) has increasingly become embedded in everyday life and is progressively becoming indispensable for public, business, personal efficiency or even improvement of livelihoods [1]. Web users including People with Disabilities (PWDs) can conveniently undertake a number of tasks that would otherwise be difficult or impossible. But many Web applications such as e-learning, e-commerce and e-government are not accessible to PWDs including the blind. Through Web accessibility guidelines, Web developers can develop Web applications that are accessible to PWDs. However, majority of the available accessibility guidelines are difficult to integrate into existing developer workflows and rarely offer specific suggestions that are developer oriented. In this paper, we propose a Web Design Framework for Improved Accessibility for People with Disabilities (WDFAD). The WDFAD provides precise guidelines on how to develop Web applications that are accessible to PWDs particularly the blind. These are packaged according to the three components of Web applications namely; content, navigation and user interface. Using constructs of the Non Functional Requirements (NFR) Framework, Web accessibility design objectives are represented as primary goals and sub goals. The primary goals represent the high level accessibility design objectives, while the sub goals represent the requirements that need to be met in the Web development process in order to meet each primary goal. WDFAD also illustrates the overlaps between the process of meeting each primary goal. This unveils the optimal ways of achieving Web accessibility during Web design. The precise nature of WDFAD and its packaging according to the main components of Web applications makes Web accessibility requirements potentially easier to understand and apply by Web developers. Web Developers prefer precise and familiar tools due to their busy work life and daily interface and expression in formal instructions. In addition, the global versus local classification of Web accessibility requirements in WDFAD modularizes the web accessibility guidelines hence making them easier to understand, apply and update.

Web Application Development has shown progressive and rapid growth using various techniques. Nonetheless, web application security is a major component in web development that is often overlooked or not properly focused on. Due to ad hoc existence and poor code written, most available web applications are vulnerable and desirable target for the attackers. To alleviate this issue, the use of defensive programming basic technique allows the developers to develop secure applications. Defensive programming includes validate output and correctly manages error messages. This avoids the misuse of snippets and builds the program in a consistent way despite unpredictable inputs. The purpose of this paper is twofold. Firstly, this paper discussed the development of a web application program using PHP as server-side scripting exploiting defensive programming techniques to overwhelm web application vulnerabilities. Secondly, this paper examined common vulnerabilities of web application risks refer to Open Web Application Security Project to validate the effectiveness of defensive programming technique. The work presented in this paper shall be a fundamental guideline for the development of secure web-based applications.

Web application development from simple web pages to complex interactive platforms (including social networks, e-commerce systems, corporate portals) requires new approaches, tools and technologies. JavaScript libraries and frameworks play a special role in developing web applications, simplifying the creation of effective, scalable, and convenient interfaces. The purpose of the article is to research the problems and prospects of using React in combination with Redux when creating web applications with a complex structure, to assess the advantages of their joint use in comparison with similar tools and to develop the web application “FarmerProducts”. The research methodology consists of the main methodological approaches and technological tools for developing web applications. Such methods, in particular, are: system and comparative analysis – to identify the features of creating web applications; method of expert assessments, which involves the study of literary sources and information resources, conducting interviews and surveys of experts, as well as the processes of developing and testing scalable and high-performance web applications based on the use of React and Redux. The scientific novelty of the research is the analysis of modern tools (React, Angular, Vue. js) for developing web applications, identifying problems and prospects for their use, creating an author’s web application (using React and Redux), which includes an intuitive interface, a flexible database, simplifying the process of working with the application by using a stack of modern technologies. Conclusions. The paper analyses the problems and prospects of using modern web application development tools; focuses on React, which is suitable for different projects; conducts a comparative analysis of React with Angular, Vue. js and Svelte, identifies their main characteristics, advantages, disadvantages; demonstrates the dependence of the choice of tools on the project context (React in combination with Redux can provide an optimal balance between performance, flexibility and scalability); describes the author’s web application – the FarmerProducts online store; identifies further ways to improve this web application.