silverlight 2 coreclr andrew pardoe program manager clr execution engine [email protected]
TRANSCRIPT
Why Silverlight?
Rich interactive applicationsWeb deployment gives broad reach
Windows, Mac OS X, LinuxIE, Firefox, Safari, Konquerer
Sandboxing provides security
Productive design and developmentReusable knowledge (XAML & .NET)Best developer tools in the industrySeparate design and development
Non-Windows platforms
Mac OS X 10.4+Silverlight 1.0 supports all hardwareSilverlight 2 supports Intel MacMac is fully supported by Microsoft
Major Linux distributionsMoonlight runtime implemented by MonoFull cooperation of Microsoft
Access to documentation and testsLegal covenant protecting Mono users
Silverlight security
Sandboxed applicationsNo user elevation or security prompts within the browser—just click a URLApplications prevented from doing malicious things
Limited local interactionSafe isolated storageClient based file upload controlsCross domain networking support
Code-behind
Silverlight “code-behind” modelCode lives behind the pageUpdating the code doesn’t change the design
Productive design and developmentReusable knowledge (XAML & .NET)Best developer tools in the industrySeparate design and development
Designers
Designers and developers are different.
Developers
Developers work from the inside outward.
Getting started
What you need
Silverlight 2 Beta 1
NotepadNo SDK required, everything is text
A better option…Silverlight Tools for Visual Studio 2008Expression Blend 2.5 March Preview
Everything you need is onlinehttp://www.silverlight.net
From XAML to Silverlight
From XAML to Silverlight
.NET is a desktop technology. Why use it on the web?Developers, developers, developers!
Performance and expressiveness
Silverlight lets you use what you already know
C#, VB, JScript—Silverlight CoreCLR supports all .NET languagesSL2 DLR adds popular dynamic languages like IronPython and IronRuby
Why CoreCLR?
CoreCLR builds from same source code as the desktop CLR
100% compatible execution environment
Much smaller package4.3 MB download for SL2 Beta 1
What’s different in CoreCLR? We’ll look at the desktop CLR and compare it to CoreCLR
Why CoreCLR?
Overview of Silverlight 2
Browser hosts through ActiveX
Presentation Core
UI CoreJS
Interop
Inputs, Controls,Media, DRM
CoreCLR
BCL
DLR
The CLR is simple, right?
MSIL + Metadata
Write a program in .NETC# source
Runs with Base Class Library
Running code loads the CLR EE
Managed protected environment
Compile to MSIL executable
Layout objects in memory
JIT produces native code
VM & GC
Code + .NET
What's different in CoreCLR?
Small size allows on-demand installFewer scenarios than desktop CLR
Sandboxed codeSmaller Base Class LibraryOnly hosted by ActiveX controls
Supported on Intel Apple Mac OS X
What's the same?
Dynamic Language RuntimeExecution engine
JIT compilerGarbage collectorVirtual machine
New security modelSecurity Transparency replaces Code Access Security
Transparency may be supported in desktop
Not just C# and VB (C++/CLI, F#)AdaCobolEiffelForthFortranNemerleLispPerlPascalmany more
Program in any .NET language
All statically compiled
DLR adds popular web languagesDLR creates MSIL at runtimeBuilt on a message-passing system
Objects respond to messagesBehavior based on language semanticsMessages converted to MSIL
Built on dynamic method dispatch and dynamic type system
Messages are bound to methodsDynamic types are CLR types
Dynamic Languages
DLR Console
DEMO
Local file system access
OpenFileDialog for read-only local file system accessIsolatedStorageFile provides storage
Define the scope with a using directive Exiting scope disposes file objects
Simplified Base Class Library
Web-hosting reduces scenariosClick-time install reduces sizeSimplified BCL is based on .NET CF
Non-generic collections removedLocalization culture information from OSBackgroundWorker for most threading
See BCL team blog for more detailsGuidance available to help port existing .NET code to Silverlight’s smaller BCL
Objects, versioning and binding
Versioning and binding are transparentActiveX host loads CoreCLR, creates appdomain and applies policiesFull access to XAML and HTML DOMs
XAML can be written dynamicallyJavascript objects and DOM elements wrapped in managed wrappers
Appdomains and processes
SL 2 app in separate browser
SL 1.0: XAML and Javascript
Different browsergets new CoreCLR
SL 2 with shared
CoreCLR
Another SL 2 app shares same CoreCLR
Browser tabs share a single CoreCLR
You need a CLR to run managed codeCould use the CLR on Windows……but changing code changes behaviorCoreCLR runs in-process with CLR
Managed browsers can host SLMultiple CoreCLRs in-process100% Silverlight compatibility no matter what CLR is already on your machine
Which CLR runs my code?
CoreCLR and CLR side-by-side
DEMO
Native code generation
Same JIT on Mac and WindowsNo NGen in Silverlight 2
Intel Mac support
CoreCLR runs on Mac OS X 10.4+Only supported on Intel Macs
CoreCLR, Base Class Libraries and other platform
assemblies
Mac OS X 10.4+(Intel)
Windows(32-bit)
Platform Adaptation
Layer
Execution engine is the same
Same execution engine as CLRCore functionality: JIT, GCVirtual machine: EH, threading
Simplified security modelCAS is gone!Transparent, Safe Critical and Critical
All user code is transparent
Security Transparency Model
No more evidence, permissions, policy levels or code groupsNo more complicated documentationNo more stackwalks for code access -Transparent code can call public methods, use public types and override methods…
If it’s platform or same application’s codeIf it’s Safe Critical or Transparent security
Security Transparency exampleWINAPI
CreateFile (Critical code)
creates file without any validation
User code(transparent)wants to write
a file
System.IO.IsolatedStorageFile StreamWriter
(SafeCritical code)verifies the request and calls
Windows API
Silverlight is simple, right?
MSIL + Metadata
Use same .NET skillsC# source
Web has simpler scenarios
Code uses smaller BCL
Same CLR means no surprises
DLR adds new languages
Same CoreCLR on any host
Security Transparency is easy
VM & GC
Code + .NET
Woodgrove Financial
DEMO
Chess: Javascriptvs. CoreCLR
DEMO
Questions?
Q&A
Shawn Farkas’ blog on CLR securityhttp://blogs.msdn.com/shawnfa
Silverlight – Get Startedhttp://silverlight.net/GetStarted
BCL team bloghttp://blogs.msdn.com/bclteam
Resources
Where to find these slideshttp://blogs.msdn.com/apardoe
© 2007 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.