Abstract
We present an approach for statically reasoning about the behavior of Web applications that are developed using Java Servlets and JSP. Specifically, we attack the problems of guaranteeing that all output is well-formed and valid XML and ensuring consistency of XHTML form fields and session state. Our approach builds on a collection of program analysis techniques developed earlier in the JWIG and Xact projects, combined with work on balanced context-free grammars. Together, this provides the necessary foundation concerning reasoning about output streams and application control flow.
This is a preview of subscription content, log in via an institution.
Buying options
Tax calculation will be finalised at checkout
Purchases are for personal use only
Learn about institutional subscriptionsPreview
Unable to display preview. Download preview PDF.
References
Aho, A.V., Sethi, R., Ullman, J.D.: Compilers: Principles, Techniques, and Tools. Addison-Wesley, Reading (1986)
Arkin, A., et al.: Web Services Business Process Execution Language Version 2.0. OASIS, Committee Draft (December 2005)
Berstel, J., Boasson, L.: Formal properties of XML grammars and languages. Acta Informatica 38(9), 649–671 (2002)
Brüggemann-Klein, A., Wood, D.: Balanced context-free grammars, hedge grammars and pushdown caterpillar automata. In: Proc. Extreme Markup Languages (2004)
Christensen, A.S., Møller, A., Schwartzbach, M.I.: Extending Java for high-level Web service construction. ACM Transactions on Programming Languages and Systems 25(6), 814–875 (2003)
Christensen, A.S., Møller, A., Schwartzbach, M.I.: Precise analysis of string expressions. In: Cousot, R. (ed.) SAS 2003. LNCS, vol. 2694, pp. 1–18. Springer, Heidelberg (2003)
Jansen-Vullers, M.H., van der Aalst, W.M.P., Rosemann, M.: Mining configurable enterprise information systems. Data & Knowledge Engineering 56(3), 195–244 (2006)
Kirkegaard, C., Møller, A.: Type checking with XML Schema in Xact. Technical Report RS-05-31, BRICS. Presented at Programming Language Technologies for XML, PLAN-X 2006 (2005)
Kirkegaard, C., Møller, A.: Static analysis for Java Servlets and JSP. Technical Report RS-06-10, BRICS (2006)
Kirkegaard, C., Møller, A., Schwartzbach, M.I.: Static analysis of XML transformations in Java. IEEE Transactions on Software Engineering 30(3), 181–192 (2004)
Kirkegaard, C., Møller, A.: dk.brics.schematools (2006), http://www.brics.dk/schematools/
Knuth, D.E.: A characterization of parenthesis languages. Information and Control 11, 269–289 (1967)
Minamide, Y.: Static approximation of dynamically generated Web pages. In: Proc. 14th International Conference on World Wide Web, WWW 2005, pp. 432–441. ACM Press, New York (2005)
Mohri, M., Nederhof, M.-J.: Robustness in Language and Speech Technology. In: Regular Approximation of Context-Free Grammars through Transformation, vol. 9. Kluwer Academic, Dordrecht (2001)
Sun Microsystems. Java Servlet Specification, Version 2.4 (2003), available from: http://java.sun.com/products/servlet/
Sun Microsystems. JavaServer Pages Specification, Version 2.0 (2003), available from: http://java.sun.com/products/jsp/
Vallee-Rai, R., Hendren, L., Sundaresan, V., Lam, P., Gagnon, E., Co, P.: Soot – a Java optimization framework. In: Proc. IBM Centre for Advanced Studies Conference, CASCON 1999, IBM (November 1999)
van der Aalst, W.M.P., Aldred, L., Dumas, M., ter Hofstede, A.H.M.: Design and implementation of the YAWL system. In: Persson, A., Stirna, J. (eds.) CAiSE 2004. LNCS, vol. 3084, pp. 142–159. Springer, Heidelberg (2004)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2006 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Kirkegaard, C., Møller, A. (2006). Static Analysis for Java Servlets and JSP. In: Yi, K. (eds) Static Analysis. SAS 2006. Lecture Notes in Computer Science, vol 4134. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11823230_22
Download citation
DOI: https://doi.org/10.1007/11823230_22
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-540-37756-6
Online ISBN: 978-3-540-37758-0
eBook Packages: Computer ScienceComputer Science (R0)