davedx/aerine

Aerine is an attempt to create a new web framework from first principles

aerine's Issues

Documentation

Write some basic documentation to accompany the demo project.

Protection from DOS by query overload

Aerine clients can include arbitrary numbers of query references, potentially triggering selects against every database table in one request cycle. We should add some sensible default limits to this.

XSRF protection

Investigate if we are vulnerable to XSRF, and if so, implement a mechanism to protect against it (tokens?)

Integrate JSS

https://github.com/cssinjs/jss is a great fit as it can generate styles in the front end without requiring a heavy complex toolchain.

Unit tests

Add some unit tests of the more critical areas.

Implement TODO MVC

As a second demo project.

Create account doesn't login properly

It redirects but doesn't log the user in, so currentUser isn't set. Needs investigation

XSS protection

The framework should support some form of XSS protection.

Convert transport to REST with extensions

Currently we're using a custom text-based protocol to communicate between the client and server.

This should be ported to a REST based protocol following these requirements:

• A standard REST client should be able to perform basic read operations just using URIs
• A standard REST client should be able to perform basic update (create, update, delete) operations
• An Aerine-aware client should be able to perform advanced operations such as adding query references to select subsets of data types

Attribute read protection

Ensure read: false is respected (for e.g. user password, token fields) across entire framework, not only in addAllReadableProperties.