This document introduces Seaside, a web framework and application platform built using Smalltalk. It is template-free, open-source, and provides security benefits compared to traditional web frameworks by avoiding things like tag soup, separate templates, and directly passing around IDs. Seaside aims to optimize web development by taking away pain points like waiting for edit/compile/run cycles and focusing on building exceptional product features. The document encourages learning more about Seaside's benefits like full object-oriented debugging and security at www.seaside.st.

1. Seaside
Why should you care?
TM
TM
Julian Fitzell
Cincom Systems

2. What is Seaside?

3. A web framework
TM

4. A web framework^
application
TM

5. A web framework^
application
^
Smalltalk
TM

6. A web framework^
application
^
heretical?
TM

7. A web framework^
application
^
heretical?
TM

8. A web framework^
application
^
template-free
TM

9. A web framework^
application
^
open-source
TM

10. WebObjects

11. Ruby

12. Photocourtesyofhttp://www.flickr.com/photos/pragdave/173643703/

13. The web is a language
equalizer
Photocourtesyofhttp://www.flickr.com/photos/pragdave/173643703/

14. Photocourtesyofhttp://www.flickr.com/photos/pragdave/173643703/
I can’t see anything
wrong. Could you try
again?

15. “Why should
I care?”

16. Productivity

17. Productivity gag?

18. Programming
costs
money

19. Programming
costs
money
lots of

20. Let’s optimize
development

21. Let’s take away the
pain

22. Let’s focus on the
features that make
our products truly
exceptional

23. In business, there is nothing
more valuable than a technical
advantage your competitors
don't understand.
– Paul Graham

24. So what’s
your pain?
Courtesy of stock.xchng user Bubbels

25. <?xml version="1.0" encoding="UTF-8" ?>
<!DOCTYPE struts PUBLIC
"-//Apache Software Foundation//DTD Struts Configuration 2.0//EN"
"http://struts.apache.org/dtds/struts-2.0.dtd">
<struts>
<package name="mailreader-support" namespace="/" extends="mailreader-default">
<action name="Tour">
<result>/tour.html</result>
<interceptor-ref name="guest"/>
</action>
<action name="Welcome" class="mailreader2.Welcome">
<result>/Welcome.jsp</result>
<interceptor-ref name="guest"/>
</action>
<action name="Logout" class="mailreader2.Logout">
<result type="redirectAction">Welcome</result>
</action>
<action name="Login_*" method="{1}" class="mailreader2.Login">
<result name="input">/Login.jsp</result>
<result name="cancel" type="redirectAction">Welcome</result>
<result type="redirectAction">MainMenu</result>
<result name="expired" type="chain">ChangePassword</result>
<exception-mapping
exception="org.apache.struts.apps.mailreader.dao.ExpiredPasswordException"
result="expired"/>
<interceptor-ref name="guest"/>
</action>
<action name="Registration_*" method="{1}" class="mailreader2.Registration">
<result name="input">/Registration.jsp</result>
<result type="redirectAction">MainMenu</result>
<interceptor-ref name="guest"/>
</action>
XML Files?

26. Tag soup?
Courtesy of stock.xchng user lusi

27. Spaghetti
Templates?
Courtesy of stock.xchng user TouTouke

28. Waiting for
edit,
compile,
run?
Courtesy of stock.xchng user matchstick

29. Code
generation?
Courtesy of stock.xchng users wildiexx and sundesigns

30. Mapping?
Object-Relational
Courtesy of stock.xchng user theswedish

31. Passing around IDs?

32. Security?
Courtesy of stock.xchng user lusi

33. step
Processes?
Multi-
Courtesy of stock.xchng user mexikids

34. Components

35. CBA

36. CBA

37. New Item
Add

38. A B C

39. New Item
Add

40. Demo

41. New Item
Add
?
A B C

42. New Item
Add
?New Item
Add
A B C

43. New Item
Add
New Item
Add
item
item
A B C

44. a := self request: ‘A number?’.
b := self request: ‘Another?’.
self inform: a + b

45. a := self request: ‘A number?’.
b := self request: ‘Another?’.
self inform: a + b

46. Demo

47. ActionAction
WebBrowser

48. WebBrowser
TaskTask

49. WebBrowser
TaskTask
CONTINUATIONS

50. Single Tool-chain

51. “7 Things”
Courtesy of stock.xchng user chux
3
21
4
5
6 7

52. In Smalltalk,
everything is an
object

53. In Smalltalk,
everything is an
object
Seaside+

54. Templates aren’t OO

55. <h1><% print $title %><h1>

56. html heading: title

57. ✓Debugging

58. Refactoring
✓

59. Callbacks...
✓

60. <a href=“/deleteItem?id=<% print
$item.id%>”>Delete</a>

61. html anchor
callback: [ self delete: item ];
with: ‘Delete’

62. Security
Courtesy of stock.xchng user julosstock

63. Cross-site scripting
(XSS)
© Mark Miller, from morguefile.com

64. Output is encoded
by default

65. html heading: title

66. Parameter injection
Courtesy of stock.xchng user foxumon

67. Parameter names are
not meaningful

68. IDs are not
passed around

69. Actions are bound to
functions

70. html anchor
callback: [ self delete: item ];
with: ‘Delete’

71. If you don’t expose it,
your users can’t do it!

72. Replay attacks
Courtesy of stock.xchng user ratnesh

74. Session (96-bit)

75. Page (96-bit)

77. Demo

78. Where can I find out
more?

79. www.seaside.st

81. Mailing list

82. Examples

86. Julian Fitzell
jfitzell@cincom.com
blog.fitzell.ca
Twitter: @jfitzell
www.seaside.st
Seaside is a trademark of Avi Bryant and Julian Fitzell
CINCOM and the Quadrant Logo are registered trademarks of Cincom Systems, Inc.
All other trademarks belong to their respective companies.
© 2010 Cincom Systems, Inc.
© 2009 Julian Fitzell
All rights reserved