Architectural Principles for Safe Web Programs
Charles Reis, Steven D. Gribble, and Henry M. Levy (University of Washington)

• Q: Could we add primitives to operating systems instead of restructuring web browsers?
• A: System call interface is too broad.

• Q: How is your approach different from Java VM?
• A: Java doesn’t offer heterogeneous content. People want mashups and different platforms.

• Q: How this framework would prevent cross site scripting?
• A: We can have white list in the front of the page what code is signed.

• Q: Is this approach implementable just by deploying new browser and changing the way server side applications work?
• A: Yes.

• Alex: looks like this is similar to OS discussions? Monolithic vs non-monolithic designs.
• A: True, we can learn from the past!!!