Citation Context

... This form of composition resembles lexical macro expansion in a way that is not amenable to parsing [16] and opens the door to security problems such as SQL injection or cross-site scripting attacks =-=[8]-=-. Library embedding. To avoid lexical composition and syntax errors at runtime, we can alternatively embed a DSL as a library, that is, a reusable collection of functionality accessible through an API...

Citation Context

...minals and nonterminals. Extensions, thus, are 5not defined to extend multiple host languages. While it may be appealing to see how languages such as SQL can be embedded into multiple host languages =-=[3]-=-, our interests are in extensions that are more closely tied to the host language, both syntactically (in that extension constructs may include host language constructs, such as in the SQL foreach and...

Citation Context

...x substituted by actual arguments ~y). 6 Related Work In previous work we have developed MetaBorg [5], an approach for embedding domain-specific languages in general-purpose languages, and StringBorg =-=[4]-=-, an approach for syntactically embedding query and shell languages to prevent injection attacks. This work extends the repertoire to the embedding of DSLs in DSLs with a globalto-local weaving transf...

Citation Context

...erally, string-embedded programs do not compose well with each other because string embedding reifies a lexical macro system [10]. In particular, string embeddings are vulnerable to injection attacks =-=[3]-=-. Alternatively, programs of the embedded language can also be expressed as a sequence of API calls in the host language. Paul Hudak coined the term pure embedding for this kind of self-extension [15]...

Citation Context

...ser, String pw) { SQL stm = <| SELECT id FROM Users WHERE name = ${user} AND password = ${pw} |>; return executeQuery(stm).size() != 0; } Figure 8. An extension of Java with SQL queries, adapted from =-=[9]-=-. module Java-SQL imports Java SQL exports context-free syntax "<|" Query "|>" → Expr {cons("ToSQL")} "${" Expr "}" → SqlExpr {cons("FromSQL")} Figure 9. Syntax of Java with embedded SQL queries, adap...

Citation Context

...object syntax for meta-programming [3, 25], embedding of domain-specific languages in general purpose languages (MetaBorg) [11, 7], and syntax embeddings for preventing injection attacks (StringBorg) =-=[8]-=-. While the architecture outlined above applies to all these language libraries, there are many design choices to be made in filling in the parameters to the architecture. For example, a recent innova...

Citation Context

...anguage into a program in the base language. Examples of preprocessors include annotation processors such as XDoclet [37] and Java’s 91 APT [35], SQLJ [24] an embedding of SQL in Java, and StringBorg =-=[5]-=-, a generic approach for embedding languages such as SQL. As they are employed as a separate tool, rather than requiring integration into a compiler, preprocessors are highly portable. By avoiding dir...

Citation Context

...y to customize aspects of a component. Reuse is particularly important when considering language extension and embedding, as occurs for example in scenarios such as domain-specific language embedding =-=[3,1]-=-, and meta-programming with concrete object syntax [3]. Ideally, language combinations are defined modularly, and likewise their IDE support should be composed from IDE support for the constituent lan...