Toshiya SAITOH stoshiya

Erlang/OTP で WebApp の開発に必要な N 個のこと

元ネタ:	http://d.hatena.ne.jp/gfx/20130909/1378741015

あるプログラミング言語で実際にWebAppを開発できるようになるまで、何が必要だろうか。言語仕様の習得は終えているとしよう。おそらく、最低限以下のような知識が必要だと思われる。とりあえず Erlang/OTP について知っていることを書いた。

ただし、HTML 生成をするならそもそも Erlang/OTP を選択するのは正しい選択では無い。あくまで API サーバを作るという前提であるべきだ。

Don't run as root.
For sessions, set httpOnly (and secure to true if running over SSL) when setting cookies.
Use the Helmet for secure headers: https://github.com/evilpacket/helmet
Enable csrf for preventing Cross-Site Request Forgery: http://expressjs.com/api.html#csrf
Don't use the deprecated bodyParser() and only use multipart explicitly. To avoid multiparts vulnerability to 'temp file' bloat, use the defer property and pipe() the multipart upload stream to the intended destination.

Version:	Build version go 1.1.1
original:	http://golang.org/doc/code.html

MessagePackが文字列とバイナリをわけないのは問題？

Objective Cの実装使ってるとある問題にぶちあたった．なので，文字列をちゃんとバイナリ(Raw)と分けるべき，という提案

(*) 俺は熟読したわけではないので，中身が気になる人はちゃんと本スレを読みましょう

Setup:

$ mongo
> use pubsub
> db.createCollection('messages', { capped: true, size: 100000 })
> db.messages.insert({})

	var fs = require('fs');
	var http = require('http');
	var util = require('util');
	var file = './1G.file';
	var stat = fs.statSync(file);
	http.createServer(function (req, res) {
	res.writeHead(200, {'Content-Type': 'octet-stream/binary',
	'Content-Length': stat.size
	});
	var rStream = fs.createReadStream(file);

	Copyright (C) 2011 by Colin MacKenzie IV

	Permission is hereby granted, free of charge, to any person obtaining a copy
	of this software and associated documentation files (the "Software"), to deal
	in the Software without restriction, including without limitation the rights
	to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
	copies of the Software, and to permit persons to whom the Software is
	furnished to do so, subject to the following conditions:

	The above copyright notice and this permission notice shall be included in

	docs.fluentd.org/ja/articles/install-by-homebrew

	brew install "http://toolbelt.treasure-data.com/brew/td-agent.rb"