[Lift] Comet vs xRTML

[Sanx]

Greetings to all

Just check out the following project:

http://www.xrtml.org

My question is this:

Can be considered as an alternative to the use of CometActors?

Thank you very much for your attention

[Diego Medina]

I would not use them for a few reasons, but the biggest one? It is
vulnerable to XSS attacks.

Just for the fun of it, go to their demo site:

1- http://www.xrtml.org/demos_81.html
2- Click on See demo
3- On the window on the left, just enter this on the description

">Mas<script>alert(/hi/)</script>

4- Click Send

5- See a javascript popup twice (at least on FF on linux)

( Later tonight I'll send them an email so they fix it)

Regards,

Diego



http://www.xrtml.org/demos_81.html

Post by Sanx
Greetings to all
http://www.xrtml.org
Can be considered as an alternative to the use of CometActors?
Thank you very much for your attention
--
Lift, the simply functional web framework: http://liftweb.net
Code: http://github.com/lift
Discussion: http://groups.google.com/group/liftweb
Stuck? Help us help you: https://www.assembla.com/wiki/show/liftweb/Posting_example_code

--
Diego Medina
Lift/Scala Developer
diego-1zcwdi0lS4z2eFz/***@public.gmane.org
http://www.fmpwizard.com

[IL]

Another long-polling lib?

just...

GIVE ME WEBSOCKET!

[IL]

Wait!

It's not http at all!

still

GIVE ME WEBSOCKET!

We love standard!

[Diego Medina]

Post by IL
GIVE ME WEBSOCKET!

Out of curiosity, what will you be able to do with websockets that you
cannot with comet?

Thanks

Diego

Post by IL
We love standard!
--
Lift, the simply functional web framework: http://liftweb.net
Code: http://github.com/lift
Discussion: http://groups.google.com/group/liftweb
https://www.assembla.com/wiki/show/liftweb/Posting_example_code

--
Diego Medina
Lift/Scala Developer
diego-1zcwdi0lS4z2eFz/***@public.gmane.org
http://www.fmpwizard.com

[IL]

performance.

[David Pollak]

Post by IL
performance.

Please document performance issues with Lift's CometActor implementation.
What is the specific issue that you are *actually* having?

Post by IL
--
Lift, the simply functional web framework: http://liftweb.net
Code: http://github.com/lift
Discussion: http://groups.google.com/group/liftweb
https://www.assembla.com/wiki/show/liftweb/Posting_example_code

--
Visi.Pro, Cloud Computing for the Rest of Us http://visi.pro
Lift, the simply functional web framework http://liftweb.net
Follow me: http://twitter.com/dpp
Blog: http://goodstuff.im

[Lukasz Kuczera]

realtime (I mean real real time, no http requests all the time)

Post by Diego Medina

Post by IL
GIVE ME WEBSOCKET!

Out of curiosity, what will you be able to do with websockets that you
cannot with comet?
Thanks
  Diego

Post by IL
We love standard!
--
Lift, the simply functional web framework:http://liftweb.net
Code:http://github.com/lift
Discussion:http://groups.google.com/group/liftweb
https://www.assembla.com/wiki/show/liftweb/Posting_example_code

--
Diego Medina
Lift/Scala Developer

[David Pollak]

Post by Lukasz Kuczera
realtime (I mean real real time, no http requests all the time)

With Lift's CometActor long poll stuff, there's going to be a 300-500ms
delay between the time code is executed on the server and the time the
client repaints an update depending on connection speed, network latency,
etc.

If you had a direct TCP/IP connection, you could drop that to 50-300ms.
So, we're talking a 250ms difference for Lift's long polling vs. something
more direct. Unless you're doing high frequency trading or twitch gaming
(neither should be done in a browser anyway), I don't think there's a lot
of difference.

Post by Lukasz Kuczera

Post by Diego Medina

Post by IL
GIVE ME WEBSOCKET!

Out of curiosity, what will you be able to do with websockets that you
cannot with comet?
Thanks
Diego

Post by IL
We love standard!
--
Lift, the simply functional web framework:http://liftweb.net
Code:http://github.com/lift
Discussion:http://groups.google.com/group/liftweb
https://www.assembla.com/wiki/show/liftweb/Posting_example_code

--
Diego Medina
Lift/Scala Developer

--
Lift, the simply functional web framework: http://liftweb.net
Code: http://github.com/lift
Discussion: http://groups.google.com/group/liftweb
https://www.assembla.com/wiki/show/liftweb/Posting_example_code

--
Visi.Pro, Cloud Computing for the Rest of Us http://visi.pro
Lift, the simply functional web framework http://liftweb.net
Follow me: http://twitter.com/dpp
Blog: http://goodstuff.im

[David Pollak]

Post by Sanx
Greetings to all
http://www.xrtml.org
Can be considered as an alternative to the use of CometActors?

I wouldn't mix it with a Lift project because you'd likely get into nasty
issues about connections ownership, etc.

I'm not sure how they support all the different platform types (PHP,
ASP.net and JVM).

If you have specific issues with Lift's CometActor implementation, let's
talk about them.

Please keep in mind that the Lift CometActor implementation has been tested
in production for more than 4 years. It's been tested against a wide
variety of web browsers. It's been tested against a wide variety of device
types. It's been tested against a wide variety of connection loss
situations (for fun, run a Lift comet app, then sleep your laptop for 5
minutes and then re-open it... you'll have the correctly rendered page).

Further, as Diego points out, the Lift CometActor implementation is secure
against XSS and other vulnerabilities by default.

Also, Lift's CometActor implementation is resource efficient (doesn't use
anything more than an NIO socket) and code efficient (using the Actor
paradigm makes for very simple asynchronous code).

So, if you've got a specific use case that Lift's CometActors are not
meeting, let's talk about it.

Post by Sanx
Thank you very much for your attention
--
Lift, the simply functional web framework: http://liftweb.net
Code: http://github.com/lift
Discussion: http://groups.google.com/group/liftweb
https://www.assembla.com/wiki/show/liftweb/Posting_example_code

--
Visi.Pro, Cloud Computing for the Rest of Us http://visi.pro
Lift, the simply functional web framework http://liftweb.net
Follow me: http://twitter.com/dpp
Blog: http://goodstuff.im