Comments on: GWT: improving performance

By: Rudolf Michael

Rudolf Michael — Wed, 13 Feb 2008 11:05:08 +0000

Hello,
Intresting article…
We’re also moving to GWT and i have been working over it since 3 months now. I totaly agree with you on the HTML segment part, we have already figured out that doing the design using pure html and css is much much faster then using the GWT Panels components. what we are doing right now is retrieving the HTML page using an HTTP Request, then every Class/HTML Page will update its HTML code by creating and setting the widgets. we have used HTMLPanel to load the html pages and then use panel.add(Widget, htmlID) to add the widgets, everytime the page has finished loading its widgets. we’re adding it to the RootPanel, our RootPanel consits of one static html page where it contains html ID. the problem is that i still have some performance issues specially if a registration page has like 80 widgets to set where every widget has an http call to get its data from the server. so i will try to use DOM.setInnerHTML instead of RootPanel().get(”HTMLID”).add(htmlPanel); do you know which one is faster to execute?

By: Ed

Ed — Mon, 18 Feb 2008 09:26:07 +0000

Hi Renat,

I was looking a bit more at your code, and I think I could be a bit more optimized by optimizing the method DOM.getElementById() usage….
Now this method will search the whole dom tree. It’s better to search the tree from the parent down, which is know by forehand… (I noticed this in other gwt related projects )…

By: Rajesh Venkatesan

Rajesh Venkatesan — Tue, 19 Feb 2008 06:55:24 +0000

Hi,

Seems like an interesting option. But GWT has explicitly stated that use of inner html is a potential cause of XSS atacks. Any thoughts on that?

http://groups.google.com/group/Google-Web-Toolkit/web/security-for-gwt-applications

Rajesh V

By: Renat Akhmerov

Renat Akhmerov — Tue, 19 Feb 2008 08:16:08 +0000

Hi, Ed

Thank you for your note, looks like it makes a lot of sense to do your way

By: Alexey Harlamov

Alexey Harlamov — Tue, 19 Feb 2008 08:24:58 +0000

Rajesh,

Yes you are right. This can be a possible security hole. That is why we are keen to see innerHtml rendering support from GWT compiler. When the code generation will be done by an automatically generated code, probability of XSS hole will be subtile.