Search

Метою статті є дослідження, аналіз і розгляд загальних проблем, які розв’язує технологія TypeScript для суворої типізації під час розробки вебзастосунків. Методами дослідження є методи семантичного аналізу основних понять цієї предметної сфери (розробка вебзастосунків засобами JavaScript та TypeScript). У статті розглянуто результати аналізу використання технології TypeScript у порівнянні з JavaScript. Новизною проведеного дослідження є аналіз сучасної технології TypeScript і розв’язання за її допомогою проблем суворої типізації під час розробки вебзастосунків. Висновки. У процесі дослідження технології TypeScript схарактеризовано її сутність, мету створення, описано переваги та недоліки. Визначено ситуації доцільності її використання.

Метою статті є дослідження, аналіз і розгляд загальних проблем і перспектив використання принципу впровадження залежностей під час розробки вебзастосунків мовою РНР. Методами дослідження є методи семантичного аналізу основних понять цієї предметної сфери (вебтехнології та вебзастосунки). У статті розглянуто відомі підходи до інверсії управління на основі використання шаблону впровадження залежностей. Новизною проведеного дослідження є розв’язання проблем інверсії управління на основі шаблону під час проєктування вебзастосунків. Висновки. Проаналізовано наявні проблеми та перспективи застосування принципу впровадження залежностей у вебзастосунках, що мають програмний код, написаний мовою РНР. Враховуючи результати проведеного аналізу, розроблено систему автоматизації впровадження залежностей, яка має важливе значення для розв’язання проблем підвищення ефективності процесів розробки вебзастосунків мовою РНР.

JavaScript-based attacks injected into a webpage to perpetrate malicious activities are still the main problem in web security. Recent works have leveraged advances in artificial intelligence by considering many feature representations to improve the performance of malicious webpage detection. However, they did not focus on extracting the intention of JavaScript content, which is crucial for detecting the maliciousness of a webpage. In this study, we introduce an additional feature extraction process that can capture the intention of the JavaScript content of the webpage. In particular, we developed a framework for obtaining a JavaScript representation based on the abstract syntax tree for JavaScript (AST-JS), which enriches the webpage features for a better detection model. Moreover, we investigated the influence of our proposed feature on improving the model’s performance by using the Shapley additive explanation method to define the significance of each feature category compared to our proposed feature. The evaluation shows that adding the AST-JS feature can improve the performance for detecting malicious webpage compared to previous work. We also found that AST significantly influences performance, especially for webpages with JavaScript content.

PESummary is a Python software package for processing and visualizing data from any parameter estimation code. The easy to use Python executable scripts and extensive online documentation has resulted in PESummary becoming a key component in the international gravitational-wave analysis toolkit. PESummary has been developed to be more than just a post-processing tool with all outputs fully self-contained. PESummary has become central to making gravitational-wave inference analysis open and easily reproducible.

JavaScript is one of the main programming languages to develop highly rich responsive and interactive Web applications. In these kinds of applications, the use of asynchronous operations that execute callbacks is crucial. However, the dependency among nested callbacks, known as callback hell, can make it difficult to understand and maintain them, which will eventually mix concerns. Unfortunately, current solutions for JavaScript do not fully address the aforementioned issue. This paper presents Sync/cc, a JavaScript package that works on modern browsers. This package is a proof-of-concept that uses continuations and aspects that allow developers to write event handlers that need nested callbacks in a synchronous style, preventing callback hell. Unlike current solutions, Sync/cc is modular, succinct, and customizable because it does not require ad-hoc and scattered constructs, code refactoring, or adding ad-hoc implementations such as state machines. In practice, our proposal uses a) continuations to only suspend the current handler execution until the asynchronous operation is resolved, and b) aspects to apply continuations in a non-intrusive way. We test Sync/cc with a management information system that administers courses at a university in Chile. [ABSTRACT FROM AUTHOR]

Implementation of the cross-fade audio effect requires shaping the fade profile for a certain audio content that is to be faded out, as well as customizing the audio fade for an additional audio content, which is to be faded in, with the purpose of achieving a smooth transition between the two different audio contents. Similar to the case of applying adjustable fades, the audio cross-fades are usually carried out in the off-line mode, by employing various transcendental functions to shape the audio fades (both fade-out and fade-in effects). To improve the computational capabilities by minimizing the delay between receiving the position within the cross-fade effect and returning both the volume of the faded out section and the volume of the faded in one, we consider that, during the cross-fade effect, the audio volume of each of the two overlapping sections is the output of a rational function i.e. a mapping defined by a rational fraction. A plain HTML5/JavaScript implementation, prepared to be tested in any major browser, is advanced in the paper in order to highlight the suitability of the suggested approach to audio cross-fade customization with real-time computing. [ABSTRACT FROM AUTHOR]

Summary: A performance regression in software is defined as an increase in an application step's response time as a result of code changes. Detecting such regressions can be done using profiling tools; however, investigating their root cause is a mostly‐manual and time‐consuming task. This statement holds true especially when comparing execution timelines, which are dynamic function call trees augmented with response time data; these timelines are compared to find the performance regression‐causes – the lowest‐level function calls that regressed during execution. When done manually, these comparisons often require the investigator to analyze thousands of function call nodes. Further, performing these comparisons on web applications is challenging due to JavaScript's asynchronous and event‐driven model, which introduce noise in the timelines. In response, we propose a design – Zam – that automatically compares execution timelines collected from web applications, to identify performance regression‐causes. Our approach uses a hybrid node matching algorithm that recursively attempts to find the longest common subsequence in each call tree level, then aggregates multiple comparisons' results to eliminate noise. Our evaluation of Zam on 10 web applications indicates that it can identify performance regression‐causes with a path recall of 100% and a path precision of 96%, while performing comparisons in under a minute on average. We also demonstrate the real‐world applicability of Zam, which has been used to successfully complete performance investigations by the performance and reliability team in SAP. [ABSTRACT FROM AUTHOR]

Discovering server HTTP endpoints – essentially, enumerating the server's attack surface – is an important step of every black-box web security scanner. One of the main methods of doing that is inferring server endpoints from the client side, determining what HTTP requests can be sent from client to server. This is trivial for requests triggered by HTML markup elements, such as links and forms, but is much harder for requests sent by JavaScript. Existing approaches to determining requests sent from JavaScript are based on a technique known as dynamic crawling - automated interaction with user interface elements using a headless browser. Dynamic crawling fails when the code that sends a request is impossible or very difficult to trigger with interface interaction. We propose a different approach for finding HTTP requests sent by JS code, which uses static code analysis. While analyzing JavaScript statically is known to be hard and applying existing analyzers to real-world web pages usually does not work, we propose a new lightweight analysis algorithm that can work on pages of real websites and can discover server endpoints that dynamic crawlers cannot. Evaluation results show that augmenting a black-box scanner with the proposed static analysis may significantly improve server-side endpoint coverage. [ABSTRACT FROM AUTHOR]

Setiap mahasiswa yang mengambil jurusan seperti: MIPA, teknik, dan kedokteran pasti pada saat perkuliahan wajib mengambil mata kuliah kalkulus. Mata kuliah kalkulus dibahas dalam berbagai macam persamaan salah satunya adalah persamaan integral. Persamaan integral biasannya digunakan untuk melakukan pendekatan perhitungan pada kasus fisis teertentu, sehingga dapat dicari solusinya. Selain itu mengitung fungsi integral juga mempuyai tingkat kesulitan tinggi, karena dibutuhkan kecepatan dan ketelitian pada proses perhitungannya. Tujuan dari penelitian ini adalah menghasilkan sebuah produk penelitian berupa aplikasi untuk menghitung dan menyelesaikan fungsi integral. Jenis penelitian yang digunakan dalam penelitian ini adalah Research and Development. Sedangkan untuk mengembangkan aplikasi peneliti menggunakan bahasa Hypertext Markup Language (HTML) dan JavaScript. Sedangkan metode numerik sebagai dasar dalam membangun aplikasi ini adalah metode Simpson 1/3. Hasil penelitian ini adalah software dalam bentuk web aplikasi yang berfungsi untuk menghitung berbagai fungsi integral. Adapun keuntungan produk penelitan ini: (1) Dapat berjalan pada semua operating system; (2) Tidak perlu tambahan fitur installasi untuk membuka aplikasi produk penelitian; dan (3) Dapat berjalan pada semua tipe hardware (laptop, personal computer, dan smartphone). Kata Kunci: Aplikasi web, integral, JavaScript, HTML Web-based application on HTML and JavaScript to complete integral functions in calculus lessons Abstract Every student majoring in: MIPA, Engineering and Medicine is required to take calculus courses during college. In calculus subjects various kinds of equations are discussed, one of which is integral equations. Integral equations are usually used to approach calculations in certain physical cases, so that solutions can be found. In addition, calculating the integral function has a high level of difficulty, because it requires speed and accuracy in the calculation process. The type of research used in this study is Research and Development. To develop application, researchers use Hypertext Markup Language (HTML) and JavaScript languages. While the numerical method as the basis for building this appliacation is the Simpson 1/3 Method. The results of this study are software in the form of web applications that function to calculate various integral functions: 1. Can run on all operating systems; 2. No need for additional application features to open (just a web browser); 3. Can run on all types of hardware (laptops, computer personal and smartphones). Keywords: Web-based aplications, integral, JavaScript, HTML

Abstract This is one part of a series of reviews concerning the application of programming languages in chemistry, edited by Dr. Rajarshi Guha. This article reviews the JavaScript technology as it applies to the chemistry discipline. A discussion of the history, scope and technical details of the programming language is presented.

We present CytoBrowser, an open-source (GPLv3) JavaScript and Node.js driven environment for fast and accessible collaborative online visualization, assessment, and annotation of very large microscopy images, including, but not limited to, z-stacks (focus stacks) of cytology or histology whole slide images. CytoBrowser provides a web-based viewer for high-resolution zoomable images and facilitates easy remote collaboration, with options for joint-view visualization and simultaneous collaborative annotation of very large datasets. It delivers a unique combination of functionalities not found in other software solutions, making it a preferred tool for large scale annotation of whole slide image data. The web browser interface is directly accessible on any modern computer or even on a mobile phone, without need for additional software. By sharing a 'session', several remote users can interactively explore and jointly annotate whole slide image data, thereby reaching improved data understanding and annotation quality, effortless project scaling and distribution of resources to/from remote locations, efficient creation of 'ground truth' annotations for methods' evaluation and training of machine learning-based approaches, a user-friendly learning environment for medical students, to just name a few. Rectangle and polygon region annotations complement point-based annotations, each with a selectable annotation-class as well as free-form text fields. The default setting of CytoBrowser presents an interface for the Bethesda cancer grading system, while other annotation schemes can easily be incorporated. Automatic server side storage of annotations is complemented by JSON-based import/export options facilitating easy interoperability with other tools. CytoBrowser is available here: https://mida-group.github.io/CytoBrowser/.

In this paper, we introduce two multi-source download protocols for loosely orchestrated networks that have high potential in Information-Centric Networking (ICN). We focus on services with high bandwidth and low delay requirements, such as video streaming. We propose MUlti-source Transmission Protocol (MUTP) for uncoded multi-source data delivery and extend it with network coding capabilities to create Coded MUTP. We investigate their throughput using a custom-designed system that includes browser extensions and proxy servers. The browser extensions intercept YouTube video downloads and forward them through our proxy server, using parallel HTTP requests, Uncoded MUTP or Coded MUTP approach. We present measurement results collected in 2018-2019, over eleven months that include 1,300,000 log records from more than 960 GBs of video download. We show that even when downloading from only two sources, our protocols can match the heavily optimized HTTP. Furthermore, by increasing the number of sources to four or higher, MUTP protocols can outperform HTTP, reaching an up to three-fold goodput (useful throughput) increase. In addition, we show that the proposed solution avoids the straggler problem, therefore adding more sources to a network increases its goodput.

Code obfuscation built upon code virtualization technology is one of the viable means for protecting sensitive algorithms and data against code reverse engineering attacks. Code virtualization has been successfully applied to programming languages like C, C++, and Java. However, it remains an outstanding challenge to apply this promising technique to JavaScript, a popular web programming language. This is primarily due to the open visibility of JavaScript code and the expensive runtime overhead associated with code virtualization. This paper presents JSPro, a novel code virtualization system for JavaScript. JSPro is the first JavaScript code obfuscation tool that builds upon the emerging WebAssembly language standard. It is designed to provide more secure code protection but without incurring a significant runtime penalty, explicitly targeting numerical JavaScript kernels. We achieve this by first automatically translating the target JavaScript code into WebAssembly and then performing code obfuscation on the compiled WebAssembly binary. Our design has two advantages over existing solutions: (1) it increases the code reverse entering complexity by implementing code obfuscation at a lower binary level and (2) it significantly reduces the performance impact of code virtualization over the native JavaScript code by using the performance-tuned WebAssembly language. We evaluate JSPro on a set of numerical JavaScript algorithms widely used in many applications. To test the performance, we apply JSPro to four mainstream web browsers running on three distinct mobile devices. Compared to state-of-the-art JavaScript obfuscation tools, JSPro not only provides stronger protection but also reduces the runtime overhead by at least 15% (up to 38.2%) and the code size by 28.2% on average.