SlideShare a Scribd company logo
San Francisco
February 21-22, 2013
About the W3Conference

•   Website: http://www.w3.org/conf/2013sf/
•   Twitter: https://twitter.com/w3cconf
•   Twitter: https://twitter.com/search/realtime?q=%23w3conf
•   Lanyard: http://lanyrd.com/2013/w3conf/
•   Video:   http://www.w3.org/conf/2013sf/video.html
Concentrations
• Client-side storage options
• Security
• Ebooks
• HTML5 capabilities
• CSS advances
• Mobile
• Accessibility
• Open source collaboration
• JavaScript (EcmaScript) advances
Client-side Storage Options
• Cookies
• Web Storage
• Web SQL (being discontinued in favor of IndexedDB)
• IndexedDB
• File APIs
• Frameworks (such as Backbone.js)
Why Use Client-side Storage?
• Mobile applications
• Disconnected applications
 (To Do Lists, Image Processors)

• Partially disconnected applications
 (Mail Clients, Calendar, Field Devices)

• Faster web sites with offline storage
 (Offline Catalogs, User Preferences)

• Reduce network traffic
• Significantly speed up display times
• Save temporary state
• Richer UI experience with user-updated data
• Prevent work loss from network disconnects
caniuse.com – Web Storage
caniuse.com - IndexedDB
Cookies
• Included in every http request
• Data is sent unencrypted over the internet
• Restricted to 4KB storage on client-side
• Stores only strings
• Used for:
  - shopping carts
  - user login
  - personalization
  - ad tracking
  - analytics
Web Storage
• W3C Web Storage Recommendation
  Defines an API for persistent data storage of key-value pair data
  in Web Clients
• localStorage and sessionStorage
• Data is stored as string, or objects using JSON.stringify,
  have to convert other types such as ints, floats, objects, and
  booleans
• Limited to approx. 2.5 - 5MB per application
• Can hook into browser events, such as offline, online, storage
  change
• Can be disabled by the user or system administrator
• Don’t store sensitive data, as like cookies, vulnerable to cross
  site scripting attacks
• Example:
  localStorage.setItem(‘favoriteFish’, ‘herring’);
  $(‘#demo’).html(‘My fav fish is: ‘ + localStorage.getItem(‘favoriteFish’));
HTML5 sessionStorage
• User carrying out single transaction, but could have
  multiple transactions in different windows at the same
  time. Cookies don’t handle this case well. Session ends
  when browser closed
• Each page has own copy of the session storage object
• Example: Two page interaction

 Page 1:
           <label>
             <input type=“checkbox”
                onchange=“sessionStorage.insurance=checked ? ‘true’ : ‘’ “>
             I want insurance this trip.
           </label>

 Page 2:
           if (sessionStorage.insurance) { your code here }
HTML5 localStorage
• Spans multiple windows, and lasts beyond current
  session
• Is not transmitted with every request like cookies
• Example: Storing user data
 <p>
  You have viewed this page
  <span id=“count”> number of </span> time(s).
 </p>
 <script>
  if (!localStorage.pageLoadCount)
     localStorage.pageLoadCount = 0;
     localStorage.pageLoadCount =
       parseInt(localStorage.pageLoadCount) + 1;
     document.getElementById(‘count’).textContent =
       localStorage.pageLoadCount;
 </script>
IndexedDB
• Indexed Data API W3C Working Draft:
  In-browser database with key-value pairs and basic
  indexing
• Available in Synchronous API & Asynchronous API
• Stores most JS Objects
• Temporary: up to 20% of available space per app
• Permanent: can request up to 100% of available space
• Example:
  function createDB() {
     var openRequest = webkitIndexedDB.open(‘Favorites’, ‘2’);
     openRequest.onerror = errorHandler;
     openRequest.onsuccess = function(e) {
       db = openRequest.result;
       createStore(db);
     }
   }
File APIs
• Stores text and binary
• FileReader API and FileWriter API
• Example:
   function fetchImage() {
      var xhr = new XMLHttpRequest();
      xhr.open(‘GET’, ‘/img/childhood.png’, true);
      xhr.responseType = ‘arraybuffer’;
      xhr.onload = function(e) {
        saveImage(xhr.response);
      };
    xhr.send();
  }
Fall-back Strategy
For browsers that don’t support
Web Storage or IndexedDB:

• Cookies
• Backbone.js
• PersistJS
• Amplify.js
• Store.js
• And many more…
Chrome Web Storage
Parashuram Narasimhan Demos
Chrome Web Storage
Chrome Web Storage
Chrome Preferences > Show Advanced Settings >
Privacy: Content settings… > All cookies and site data…
Parashuram Narasimhan Demos
Parashuram Narasimhan Demos
Security of IndexedDB
• Mozilla info: IndexedDB uses the same-origin principle,
  which ties the store to the origin that creates it
  (typically, it is the site domain or subdomain), so it
  can’t be accessed by any other origin
• Doesn’t work for content loaded from another site
  (either <frame> or <iframe>)
• Not recommended for sensitive data
• More on security in another meeting…
Presenters
•            •

•            •

•            •

•            •

•            •

•            •

•            •

•            •

•            •
Helpful Sites
•    Canisue.com: browser and device support for features
•    Html5rocks.com: Google project about HTML5
•    HTML5 & CSS3 Readiness: Browser support tool
•    HTML Living Standard: Web Storage specifics
•    My Web Store: Example of IndexedDB by Parashuram
•    Using IndexedDB: Mozilla Developer Network How-To
•    Client-side Storage: Interesting comparison
•    WebPlatform.org: W3C standards and resources
Further Research
• There was so much information, and so many great
  resources to investigate.



• Thank you!

More Related Content

PPTX
Html5 local storage
PDF
HTML5 Storage/Cache
PDF
Lt local storage
PPTX
Html5 storage and browser storage
PDF
Html5-Web-Storage
PDF
Html5 web storage
PDF
CouchDB: replicated data store for distributed proxy server
ODP
Scout xss csrf_security_presentation_chicago
Html5 local storage
HTML5 Storage/Cache
Lt local storage
Html5 storage and browser storage
Html5-Web-Storage
Html5 web storage
CouchDB: replicated data store for distributed proxy server
Scout xss csrf_security_presentation_chicago

What's hot (20)

PDF
Save your data
PDF
AJAX - An introduction
PPTX
Quick start guide to java script frameworks for sharepoint add ins oslo
ODP
WS-* with WCF
PDF
HTML5 - An introduction
PDF
Introduction to html & css
PPTX
Displaying message on web page in Javascript
PPTX
Quick start guide to java script frameworks for sharepoint apps spsbe-2015
PPTX
[SoftServe IT Academy] - JavaScript Storages
PPTX
Beyond the page
PPT
Akiban Presentation at Percona Live NYC 2012
PPT
Easy javascript
PDF
MongoDB for Coder Training (Coding Serbia 2013)
PDF
Divide et impera
PPTX
Web fundamentals - part 1
PPTX
«How to start in web application penetration testing» by Maxim Dzhalamaga
KEY
MongoDB Hadoop DC
PPT
On the incoherencies in web browser access control
PPT
Krug Fat Client
PDF
MongodB Internals
Save your data
AJAX - An introduction
Quick start guide to java script frameworks for sharepoint add ins oslo
WS-* with WCF
HTML5 - An introduction
Introduction to html & css
Displaying message on web page in Javascript
Quick start guide to java script frameworks for sharepoint apps spsbe-2015
[SoftServe IT Academy] - JavaScript Storages
Beyond the page
Akiban Presentation at Percona Live NYC 2012
Easy javascript
MongoDB for Coder Training (Coding Serbia 2013)
Divide et impera
Web fundamentals - part 1
«How to start in web application penetration testing» by Maxim Dzhalamaga
MongoDB Hadoop DC
On the incoherencies in web browser access control
Krug Fat Client
MongodB Internals
Ad

Similar to Notes on SF W3Conf (20)

PPTX
In-browser storage and me
PPTX
HTML5: An Overview
PPTX
Browser-Based Digital Preservation
PPT
INTRO TO JAVASCRIPT basic to adcance.ppt
PDF
HTML5: Introduction
PPT
Top 10 HTML5 Features for Oracle Cloud Developers
PDF
The Mobile Web - HTML5 on mobile devices
PPTX
HTML5 Programming
PDF
Web Standards Support in WebKit
PPTX
Introduction to Jquery
PDF
Intro JavaScript
PPTX
Tech io spa_angularjs_20130814_v0.9.5
PDF
Internet Explorer 8
PPTX
Node.js: The What, The How and The When
ODP
Groovy & Grails eXchange 2012 vert.x presentation
PPTX
Building SPA’s (Single Page App) with Backbone.js
PDF
Html5 Application Security
PPTX
SPTechCon DevDays - SharePoint & jQuery
PPT
Ajax workshop
In-browser storage and me
HTML5: An Overview
Browser-Based Digital Preservation
INTRO TO JAVASCRIPT basic to adcance.ppt
HTML5: Introduction
Top 10 HTML5 Features for Oracle Cloud Developers
The Mobile Web - HTML5 on mobile devices
HTML5 Programming
Web Standards Support in WebKit
Introduction to Jquery
Intro JavaScript
Tech io spa_angularjs_20130814_v0.9.5
Internet Explorer 8
Node.js: The What, The How and The When
Groovy & Grails eXchange 2012 vert.x presentation
Building SPA’s (Single Page App) with Backbone.js
Html5 Application Security
SPTechCon DevDays - SharePoint & jQuery
Ajax workshop
Ad

Notes on SF W3Conf

  • 2. About the W3Conference • Website: http://www.w3.org/conf/2013sf/ • Twitter: https://twitter.com/w3cconf • Twitter: https://twitter.com/search/realtime?q=%23w3conf • Lanyard: http://lanyrd.com/2013/w3conf/ • Video: http://www.w3.org/conf/2013sf/video.html
  • 3. Concentrations • Client-side storage options • Security • Ebooks • HTML5 capabilities • CSS advances • Mobile • Accessibility • Open source collaboration • JavaScript (EcmaScript) advances
  • 4. Client-side Storage Options • Cookies • Web Storage • Web SQL (being discontinued in favor of IndexedDB) • IndexedDB • File APIs • Frameworks (such as Backbone.js)
  • 5. Why Use Client-side Storage? • Mobile applications • Disconnected applications (To Do Lists, Image Processors) • Partially disconnected applications (Mail Clients, Calendar, Field Devices) • Faster web sites with offline storage (Offline Catalogs, User Preferences) • Reduce network traffic • Significantly speed up display times • Save temporary state • Richer UI experience with user-updated data • Prevent work loss from network disconnects
  • 8. Cookies • Included in every http request • Data is sent unencrypted over the internet • Restricted to 4KB storage on client-side • Stores only strings • Used for: - shopping carts - user login - personalization - ad tracking - analytics
  • 9. Web Storage • W3C Web Storage Recommendation Defines an API for persistent data storage of key-value pair data in Web Clients • localStorage and sessionStorage • Data is stored as string, or objects using JSON.stringify, have to convert other types such as ints, floats, objects, and booleans • Limited to approx. 2.5 - 5MB per application • Can hook into browser events, such as offline, online, storage change • Can be disabled by the user or system administrator • Don’t store sensitive data, as like cookies, vulnerable to cross site scripting attacks • Example: localStorage.setItem(‘favoriteFish’, ‘herring’); $(‘#demo’).html(‘My fav fish is: ‘ + localStorage.getItem(‘favoriteFish’));
  • 10. HTML5 sessionStorage • User carrying out single transaction, but could have multiple transactions in different windows at the same time. Cookies don’t handle this case well. Session ends when browser closed • Each page has own copy of the session storage object • Example: Two page interaction Page 1: <label> <input type=“checkbox” onchange=“sessionStorage.insurance=checked ? ‘true’ : ‘’ “> I want insurance this trip. </label> Page 2: if (sessionStorage.insurance) { your code here }
  • 11. HTML5 localStorage • Spans multiple windows, and lasts beyond current session • Is not transmitted with every request like cookies • Example: Storing user data <p> You have viewed this page <span id=“count”> number of </span> time(s). </p> <script> if (!localStorage.pageLoadCount) localStorage.pageLoadCount = 0; localStorage.pageLoadCount = parseInt(localStorage.pageLoadCount) + 1; document.getElementById(‘count’).textContent = localStorage.pageLoadCount; </script>
  • 12. IndexedDB • Indexed Data API W3C Working Draft: In-browser database with key-value pairs and basic indexing • Available in Synchronous API & Asynchronous API • Stores most JS Objects • Temporary: up to 20% of available space per app • Permanent: can request up to 100% of available space • Example: function createDB() { var openRequest = webkitIndexedDB.open(‘Favorites’, ‘2’); openRequest.onerror = errorHandler; openRequest.onsuccess = function(e) { db = openRequest.result; createStore(db); } }
  • 13. File APIs • Stores text and binary • FileReader API and FileWriter API • Example: function fetchImage() { var xhr = new XMLHttpRequest(); xhr.open(‘GET’, ‘/img/childhood.png’, true); xhr.responseType = ‘arraybuffer’; xhr.onload = function(e) { saveImage(xhr.response); }; xhr.send(); }
  • 14. Fall-back Strategy For browsers that don’t support Web Storage or IndexedDB: • Cookies • Backbone.js • PersistJS • Amplify.js • Store.js • And many more…
  • 15. Chrome Web Storage Parashuram Narasimhan Demos
  • 17. Chrome Web Storage Chrome Preferences > Show Advanced Settings > Privacy: Content settings… > All cookies and site data…
  • 20. Security of IndexedDB • Mozilla info: IndexedDB uses the same-origin principle, which ties the store to the origin that creates it (typically, it is the site domain or subdomain), so it can’t be accessed by any other origin • Doesn’t work for content loaded from another site (either <frame> or <iframe>) • Not recommended for sensitive data • More on security in another meeting…
  • 21. Presenters • • • • • • • • • • • • • • • • • •
  • 22. Helpful Sites • Canisue.com: browser and device support for features • Html5rocks.com: Google project about HTML5 • HTML5 & CSS3 Readiness: Browser support tool • HTML Living Standard: Web Storage specifics • My Web Store: Example of IndexedDB by Parashuram • Using IndexedDB: Mozilla Developer Network How-To • Client-side Storage: Interesting comparison • WebPlatform.org: W3C standards and resources
  • 23. Further Research • There was so much information, and so many great resources to investigate. • Thank you!