A Classification Framework for Web Browser Cross-Context Communication

Demand for more advanced Web applications is the driving force behind Web browser evolution. Recent requirements for Rich Internet Applications, such as mashing-up data and background processing, are emphasizing the need for building and executing Web applications as a coordination of browser execution contexts. Since development of such Web applications depends on cross-context communication, many browser primitives and client-side frameworks have been developed to support this communication. In this paper we present a systematization of cross-context communication systems for Web browsers. Based on an analysis of previous research, requirements for modern Web applications and existing systems, we extract a framework for classifying cross-context communica-tion systems. Using the framework, we evaluate the current ecosystem of cross-context communication and outline directions for future Web research and engineering.

[1]  Helen J. Wang,et al.  Subspace: secure cross-domain communication for web mashups , 2007, WWW '07.

[2]  Dawn Xiaodong Song,et al.  Towards a Formal Foundation of Web Security , 2010, 2010 23rd IEEE Computer Security Foundations Symposium.

[3]  Stéphane Sire.  Increasing Widgets Interoperability at the Portal Level , 2008 .

[4]  P. Saxena,et al.  The Emperor ’ s New APIs : On the ( In ) Secure Usage of New Client-side Primitives , 2010 .

[5]  Charles Reis,et al.  Web browsers as operating systems: supporting robust and secure web programs , 2009 .

[6]  Cesare Pautasso,et al.  Mashup development with HTML5 , 2010, Mashups '09/'10.

[7]  Adam Barth,et al.  The Security Architecture of the Chromium Browser , 2009 .

[8]  Helen J. Wang,et al.  On the Incoherencies in Web Browser Access Control Policies , 2010, 2010 IEEE Symposium on Security and Privacy.

[9]  Roger S. Pressman,et al.  Web Engineering , 2001, Lecture Notes in Computer Science.

[10]  Adam Barth,et al.  The Web Origin Concept , 2011, RFC.

[11]  Denis Gillet,et al.  Towards Collaborative Portable Web Spaces , 2009, MUPPLE@EC-TEL.

[12]  Alex Wright,et al.  Ready for a Web OS? , 2009, Commun. ACM.

[13]  Vinod Ganapathy,et al.  OMOS: A Framework for Secure Communication in Mashup Applications , 2008, 2008 Annual Computer Security Applications Conference (ACSAC).

[14]  Anahí Gallardo Velázquez,et al.  Conference , 1969, Journal of Neuroscience Methods.

[15]  Katrien Verbert,et al.  Collaborative Development of a PLE for Language Learning , 2010, iJET.

[16]  Michael Steiner,et al.  SMash: secure component model for cross-domain mashups on unmodified browsers , 2008, WWW.

[17]  Piero Fraternali,et al.  Rich Internet Applications , 2010, IEEE Internet Computing.

[18]  Sinisa Srbljic,et al.  Widget-Oriented Consumer Programming , 2009 .

[19]  David W. Embley,et al.  A Model of World Wide Web Evolution , 2009 .

[20]  Helen J. Wang,et al.  The Multi-Principal OS Construction of the Gazelle Web Browser , 2009, USENIX Security Symposium.

[21]  Collin Jackson,et al.  Securing frame communication in browsers , 2008, CACM.

[22]  Previous version: , 2004 .

[23]  Erik Isaksson,et al.  Usability and Inter-widget Communication in PLEs , 2010 .

[24]  Oscar Díaz,et al.  From page-centric to portlet-centric Web development: Easing the transition using MDD , 2008, Inf. Softw. Technol..

[25]  Abraham Silberschatz,et al.  Operating System Concepts , 1983 .

[26]  Fabio Casati,et al.  Understanding Mashup Development , 2008, IEEE Internet Computing.

[27]  Charles Reis,et al.  Architectural Principles for Safe Web Programs , 2007, HotNets.

[28]  Mary Shaw,et al.  Software architecture - perspectives on an emerging discipline , 1996 .

[29]  Abraham Silberschatz,et al.  Operating System Concepts, 5th Edition , 1994 .

[30]  Helen J. Wang,et al.  MashupOS: Operating System Abstractions for Client Mashups , 2007, HotOS.

[31]  Stéphane Sire,et al.  A messaging API for inter-widgets communication , 2009, WWW '09.

[32]  Ashish Ghoda.  Introducing Silverlight 4 , 2010 .

[33]  Bernhard Hoisl,et al.  User-tailored Inter-Widget Communication Extending the Shared Data Interface for the Apache Wookie Engine , 2010 .