【ヒカ☆ラボ関西】イケてるweb系3企業が登壇！！IT技術トーーク！での発表スライドです。 https://hikalab-kansai.connpass.com/event/68287/

1. Web
2017/10/28 ⭐

2. • @y_okady
• Web →
•
Welcome to
https://seleck.cc/625 https://www.cisco.com/c/m/ja_jp/
solution/collaboration/casestudy/1102-
cybozu-cs/voice.html

3. 750

4. • Web
•
•
•

5. Web

6. Web ( )
• Java: Spring Framework, Play Framework
• Ruby: Ruby on Rails
• PHP: CakePHP, Laravel
• Python: Django
• JavaScript: Angular, Vue.js, React
• CSS: PostCSS
• DB: RDBMS, NoSQL, Elasticsearch

7. Web ( )
• Java: Struts
• PHP: Smarty
• Perl
• JavaScript:
• DB: RDBMS (MySQL, PostgreSQL)

8. •
•
•
•
•
•

9. •
Let’s Get Started!

12. • C++ (1997, Office)
• PHP (2005, 2)
• Java (2011, kintone)

13. •
•
•
•
•
•
• 15%
both Flow and TypeScript are pretty good, and conservatively either of them can prevent about 15%
of the bugs that end up in committed code.
To type or not to type: quantifying detectable bugs in JavaScript
https://blog.acolyer.org/2017/09/19/to-type-or-not-to-type-quantifying-detectable-bugs-in-javascript/

14. • PHP
•
•
•
•

16. •
•
•
•

17. • Closure Templates
• Google Java JavaScript
• Twitter
XSS ( )
What are the benefits of using Closure Templates?
• Secure. Closure Templates are contextually autoescaped to reduce the risk of XSS.
Closure Templates | Google Developers
https://developers.google.com/closure/templates/
Closure Templates
teppeis blog
http://teppeis.hatenablog.com/entry/20120318/1332092081

18. XSS ( )
• React
• Facebook JavaScript
dangerouslySetInnerHTML
dangerouslySetInnerHTML is React’s replacement for using innerHTML in the
browser DOM. In general, setting HTML from code is risky because it’s easy to
inadvertently expose your users to a cross-site scripting (XSS) attack.
DOM Elements - React
https://reactjs.org/docs/dom-elements.html
function createMarkup() {
return {__html: 'First · Second'};
}
function MyComponent() {
return <div dangerouslySetInnerHTML={createMarkup()} />;
}

19. XSS ( )
Vue SSR XSS
Qiita
https://qiita.com/alfa/items/b0e807ae040fc8f61d20
Vue DOM SSR
※ Vue.js

20. SQL
•
1.
2.
3.
4.
• PHP addslashes
SQL Injection Prevention Cheat Sheet - OWASP
https://www.owasp.org/index.php/SQL_Injection_Prevention_Cheat_Sheet

21. SQL
• JdbcTemplate
• / bind
• DDD ( ) Repository
• SQL

23. •
• Java & JVM:
• :
•
• yrmcds:
• Elasticsearch:

24. • IaaS (2008 )
• IaaS
•
• (cybozu.com)
• IaaS
kintone IaaS
https://cloud.watch.impress.co.jp/docs/news/1081102.html

25. •
•
•
•
•

27. Facebook
• OSS
• Hack: PHP +
• HHVM: PHP Hack
• React.js
• Cassandra:
• Thrift: RPC

28. • MySQL → Lucene
• 50
• Ruby on Rails → Java & Scala
• 15,000 /
• CPU JVM
• Closure Templates, React.js
• Scrooge: Scala Thrift
Twitter
http://www.publickey1.jp/blog/10/twitterlucene50.html
https://www.infoq.com/jp/news/2012/11/twitter-ruby-to-java
http://www.publickey1.jp/blog/11/twitterruby_on_railsjavavm.html
https://www.infoq.com/jp/news/2017/02/twitter-react-mobile-stack

29. ChatWork
• PHP → Scala
http://c-note.chatwork.com/post/82673710090/dev-camp
Scala
•
•
• IntelliJ IDEA Scala
• PlayFramework

30. ChatWork
ChatWork PHP // Speaker Deck
https://speakerdeck.com/tanakayuki/chatworktophptosi
…
1 …
1 …
AWS …

32. •
•
•
•
•

33. •
•
•

34. 2017/12/2( ) 13:00 - 18:00
https://cybozutech2017.qloba.com/

35. Thanks!