11. HTTPS 19 décembre 2023 Développement web il3 HTTPS HE-Arc (DGR) 2022 Sécuriser un site web • Authentification du serveur – Assurer que le serveur est celui qu’il prétend être • Intégrité des que le client est celui qu’il prétend être • Pour un site web, ces services sont fournis par https – HTTPS : HTTP sécurisé par SSL/TLS, par défaut sur le port 443 1 Secure Socket Layer –> Transport Confidentialité • Document contenant une identité et une signature numérique • Utilisations courantes : https, mails • Délivré par une autorité de certification • Certificats clients Autorité de Certification

本文档由学院君提供 学院君致力于提供优质 Laravel 中文学习资源：https://xueyuanjun.com 1 Laravel 6.0 中文文档 本文档由学院君翻译提供 更多资源请访问 https://xueyuanjun.com 本文档由学院君提供 学院君致力于提供优质 Laravel 中文学习资源：https://xueyuanjun.com 2 第一部分：序言 新版特性 队列、数据库、Redis 集群、网络、 CloudFront CDN 进行交互的复杂性进行了抽象。 通过 Ignition 优化异常 本文档由学院君提供 学院君致力于提供优质 Laravel 中文学习资源：https://xueyuanjun.com 3 Laravel 6.0 支持 Ignition，这个一个开源的错误和异常详情页项目， 由 Freek Van der Herten 和 Marcel Pociot $flight) { return $this->deny('Explanation of denial.'); } 本文档由学院君提供 学院君致力于提供优质 Laravel 中文学习资源：https://xueyuanjun.com 4 接下来我们可以通过 Gate::inspect 方法获取授权策略的响应，然 后再通过响应示例的 message() 方法获取授权消息： $response

guaranteed to be correct nor accurate, please send your feedback and corrections to info@zzzprojects.com https://riptutorial.com/ 1 Chapter 1: Getting started with Laravel Remarks Laravel StackOverflow Slack Driven Development (TDD) in Laravel is fun and easy to implement. Hosted on GitHub and available at https://github.com/laravel/laravel, Laravel boasts of a micro- services architecture, making it tremendously MVC Laravel uses the MVC model, therefore there are three core-parts of the framework which work https://riptutorial.com/ 2 together: models, views and controllers. Controllers are the main part where

applications : c’est nous qui en sommes responsables OWASP1 • Open Web Application Security Project 1https://owasp.org/ 1 • Fondation pour améliorer la sécurité des webapps • Fondée en 2004, internationale 2https://owasp.org/www-project-mobile-top-10/ 3https://owasp.org/Top10/#methodology 4https://www.first.org/cvss/calculator/3.0 5https://cwe.mitre.org/top25/archive/2022/2022_cwe_top25.html 6https://www 6https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project 7https://owasp.org/Top10/fr/ 8https://www.hahwul.com/cullinan/history-of-owasp-top-10/ 9https://cheatsheetseries.owasp.org/cheatsheets/NPM_Security_Cheat_Sheet

– orientée service2 : atome : service (traitement) : RPC (SOAP) 1https://en.wikipedia.org/wiki/Resource-oriented_architecture 2https://fr.wikipedia.org/wiki/Architecture_orient%C3%A9e_services 1 Service Enveloppe, Entête, Corps, Erreurs 3https://upload.wikimedia.org/wikipedia/commons/3/3f/Concept_WS.jpg 4https://en.wikipedia.org/wiki/Mashup_(web_application_hybrid) 5https://science.howstuffworks.com/inn com/innovation/repurposed-inventions/5-web-mashups.htm 6https://developers.google.com/apis-explorer/ 7https://ifttt.com/ 8https://en.wikipedia.org/wiki/List_of_web_service_specifications 2 • Squelette : <

02.22, v10 : 07.02.23 1https://laravel.com/ 2http://laravel.io/forum 3http://fr.wikipedia.org/wiki/SOLID_(informatique) 4http://taylorotwell.com/ 5https://getcomposer.org/ 6https://github.com/search?l= l=PHP&q=stars%3A%3E0&ref=searchresults&type=Repositories 7https://madewithlaravel.com/ 1 Principales fonctionnalités • Routes RESTful • ORM (Eloquent, implémentation du pattern Active Record) • Migrations 8http://packalyst.com/ 9https://laravel.com/docs/master/lifecycle 10https://laravel.com/docs/5.1/contributions#coding-style 11https://styleci.io/ 12https://glitch.com/ 13https://repl.it/ 14https://www.gitpod.io/

congestion, multiplexage (0 RTT) 1https://docs.google.com/presentation/d/1eqae3OBCxwWswOsaWMAWRpqnmrVVrAfPQclfSqPkXrA/present#sl ide=id.p19 2https://caniuse.com/#feat=http2 3https://http3-explained.haxx.se/fr/ de techniques de remote scripting 4https://www.mnot.net/blog/2012/09/05/patch 5https://soabits.blogspot.ch/2013/01/http-put-patch-or-post-partial-updates.html 6https://web.archive.org/web/20110102130434/http://www 34/http://www.adaptivepath.com/ideas/essays/archives/000385.php 7https://en.wikipedia.org/wiki/Remote_scripting 3 – (i)frames – Bibliothèques JS (ex: JSRS8) – Utilisation des images/cookies (ex: GIF9)

contenu via DOM 1https://emscripten.org/ 2http://webassembly.org/ 3http://www.espruino.com/ 4https://nodebots.io/ 5https://cylonjs.com/ 6https://electronjs.org/ 7https://sciter.com/ 8https://www.ecma-international dards/standards/ecma-262/ 9https://compat-table.github.io/compat-table/es2016plus/ 10https://babeljs.io/ 11https://www.typescriptlang.org/ 12http://coffeescript.org/ 13https://en.wikipedia.org/wiki/Li org/wiki/List_of_ECMAScript_engines 14https://addyosmani.com/resources/essentialjsdesignpatterns/book/ 15http://jstherightway.org/ 2 – Bookmarklets16, exemples17 – Requêtes HTTP (Fetch API, Xml Http Request)

?10 1https://web.archive.org/web/20140320042652/http://slides.html5rocks.com 2https://github.com/html5rocks/slides.html5rocks.com 3https://www.soundstep.com/blog/experiments/jsdetection/ 4https://auduno html 5https://www.html5rocks.com/ 6https://developers.google.com/web/ 7https://www.chromeexperiments.com/ 8https://developer.mozilla.org/en-US/demos/tag/tech:html5 9https://html5demos.com/ 10https://letmegooglethat Enhancement17 • Rapidité : App Shell18, cache • Offline : Service Workers19 • Install Banner20 : HTTPS, WebApp Manifest, SW, 2 visits • Tests21 : Lighthouse en automatise une partie Exemples et tutos

pour tous • Souvent basé sur la largeur de l’écran • CSS3 • Responsive Web Design (1), Exemple1 1https://alistapart.github.io/code-samples/responsive-web-design/ex/ex-site-FINAL.html 1 Techniques • (min-width: 800px) 2https://blog.atolcd.com/adaptive-design-versus-responsive-design/ 3https://browserdiet.com/ 4https://webdesignerwall.com/tutorials/responsive-design-in-3-steps 5https://developer.mozilla queries comparent au viewport 6https://developer.mozilla.org/fr/docs/CSS/Media_queries 7https://blog.javierusobiaga.com/stop-using-the-viewport-tag-until-you-know-ho 8https://developer.apple.com/library