Skip to main content

Static Analysis for Java Servlets and JSP

  • Conference paper

Part of the book series: Lecture Notes in Computer Science ((LNPSE,volume 4134))

Abstract

We present an approach for statically reasoning about the behavior of Web applications that are developed using Java Servlets and JSP. Specifically, we attack the problems of guaranteeing that all output is well-formed and valid XML and ensuring consistency of XHTML form fields and session state. Our approach builds on a collection of program analysis techniques developed earlier in the JWIG and Xact projects, combined with work on balanced context-free grammars. Together, this provides the necessary foundation concerning reasoning about output streams and application control flow.

This is a preview of subscription content, log in via an institution.

Buying options

Chapter
USD   29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD   39.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD   54.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Learn about institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. Aho, A.V., Sethi, R., Ullman, J.D.: Compilers: Principles, Techniques, and Tools. Addison-Wesley, Reading (1986)

    Google Scholar 

  2. Arkin, A., et al.: Web Services Business Process Execution Language Version 2.0. OASIS, Committee Draft (December 2005)

    Google Scholar 

  3. Berstel, J., Boasson, L.: Formal properties of XML grammars and languages. Acta Informatica 38(9), 649–671 (2002)

    Article  MathSciNet  MATH  Google Scholar 

  4. Brüggemann-Klein, A., Wood, D.: Balanced context-free grammars, hedge grammars and pushdown caterpillar automata. In: Proc. Extreme Markup Languages (2004)

    Google Scholar 

  5. Christensen, A.S., Møller, A., Schwartzbach, M.I.: Extending Java for high-level Web service construction. ACM Transactions on Programming Languages and Systems 25(6), 814–875 (2003)

    Article  Google Scholar 

  6. Christensen, A.S., Møller, A., Schwartzbach, M.I.: Precise analysis of string expressions. In: Cousot, R. (ed.) SAS 2003. LNCS, vol. 2694, pp. 1–18. Springer, Heidelberg (2003)

    Chapter  Google Scholar 

  7. Jansen-Vullers, M.H., van der Aalst, W.M.P., Rosemann, M.: Mining configurable enterprise information systems. Data & Knowledge Engineering 56(3), 195–244 (2006)

    Article  Google Scholar 

  8. Kirkegaard, C., Møller, A.: Type checking with XML Schema in Xact. Technical Report RS-05-31, BRICS. Presented at Programming Language Technologies for XML, PLAN-X 2006 (2005)

    Google Scholar 

  9. Kirkegaard, C., Møller, A.: Static analysis for Java Servlets and JSP. Technical Report RS-06-10, BRICS (2006)

    Google Scholar 

  10. Kirkegaard, C., Møller, A., Schwartzbach, M.I.: Static analysis of XML transformations in Java. IEEE Transactions on Software Engineering 30(3), 181–192 (2004)

    Article  Google Scholar 

  11. Kirkegaard, C., Møller, A.: dk.brics.schematools (2006), http://www.brics.dk/schematools/

  12. Knuth, D.E.: A characterization of parenthesis languages. Information and Control 11, 269–289 (1967)

    Article  MATH  Google Scholar 

  13. Minamide, Y.: Static approximation of dynamically generated Web pages. In: Proc. 14th International Conference on World Wide Web, WWW 2005, pp. 432–441. ACM Press, New York (2005)

    Chapter  Google Scholar 

  14. Mohri, M., Nederhof, M.-J.: Robustness in Language and Speech Technology. In: Regular Approximation of Context-Free Grammars through Transformation, vol. 9. Kluwer Academic, Dordrecht (2001)

    Google Scholar 

  15. Sun Microsystems. Java Servlet Specification, Version 2.4 (2003), available from: http://java.sun.com/products/servlet/

  16. Sun Microsystems. JavaServer Pages Specification, Version 2.0 (2003), available from: http://java.sun.com/products/jsp/

  17. Vallee-Rai, R., Hendren, L., Sundaresan, V., Lam, P., Gagnon, E., Co, P.: Soot – a Java optimization framework. In: Proc. IBM Centre for Advanced Studies Conference, CASCON 1999, IBM (November 1999)

    Google Scholar 

  18. van der Aalst, W.M.P., Aldred, L., Dumas, M., ter Hofstede, A.H.M.: Design and implementation of the YAWL system. In: Persson, A., Stirna, J. (eds.) CAiSE 2004. LNCS, vol. 3084, pp. 142–159. Springer, Heidelberg (2004)

    Chapter  Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2006 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Kirkegaard, C., Møller, A. (2006). Static Analysis for Java Servlets and JSP. In: Yi, K. (eds) Static Analysis. SAS 2006. Lecture Notes in Computer Science, vol 4134. Springer, Berlin, Heidelberg. https://doi.org/10.1007/11823230_22

Download citation

  • DOI: https://doi.org/10.1007/11823230_22

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-540-37756-6

  • Online ISBN: 978-3-540-37758-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics