This article introduces a groundbreaking approach to creating dynamic Web application experiences. Ajax (Asynchronous JavaScript and XML) is a programming technique that lets you combine Java technologies, XML, and JavaScript for Java-based Web applications that break the page-reload paradigm

A set of tutorial and examples on how to use HTML and CSS to design specific user interfaces components.

A quick step-by-step demonstration of how the Web Essentials template was built using CSS.

Do you like to wait for pages to download? Neither do your site users. Read on and find out how to speed up that download time...

This case study describes the experiences of Connextra in using XP. Particular emphasis is placed on the interaction design aspects of the project.

This article presents an overview of performance testing for Web sites.

The protocol used for exchanging files on the Web is stateless, but maintaining state is essential for most websites. To maintain state, one option that Web developers have is to use cookies. This article provides a technical background and real-world examples to help you understand how cookies work and how to test systems that employ cookies. The amazon.com website is used as a real-world example to demonstrate cookie testing techniques.

One of the classic drawbacks to building a web application interface is that once a page has been downloaded to the client, the connection to the server is severed. Any attempt at a dynamic interface involves a full roundtrip of the whole page back to the server for a rebuild--a process which tends to make your web app feel inelegant and unresponsive. In this article, I'll be exploring how this problem can be tackled with the use of JavaScript and the XMLHttpRequest object.

The example featured in this entry includes a JavaServer Faces text field component that takes the name of a city. When the user begins entering characters in the field, the application uses AJAX to perform auto completion on the data by matching the user's input to a list of cities stored on the server. In two of the versions of this example, the text field component is a custom JavaServer Faces component that provides the AJAX support. This component shields the page author from the complexities of AJAX by rendering all the HTML and JavaScript code that is required to incorporate AJAX capabilities into an application. A third version of this example adds AJAX support to a standard JavaServer Faces component through a servlet that interacts with the JavaServer Faces component and other JavaServer Faces server-side objects to generate the appropriate auto completion data.

While many developers are aware of the threats posed by malicious code, and by SQL injection attacks in particular, there are other forms of code injection that are equally dangerous. Learn more about XPath injection, LDAP injection, and command execution injection and view examples of each type of attack. In addition, learn why many preventative actions that are commonly suggested to developers are not helpful, and discover how the creation of whitelists and blacklists can help to protect an application from malicious code injection attacks.