VS 2008 an its predecessors

Microsoft Visual Studio 2008 (VS08) is the current incarnation of the company’s long line of IDEs. It's the premier IDE for developing applications with the Microsoft .Net Framework and, at least, a contender for the best Windows-hosted C/C++ IDE. Of course, Visual Studio 2008 isn't limited to developing desktop applications; it is also good for developing Web, SOA, and device applications. This release introduces support for .Net Framework 3.5, and it supports other versions of the .Net Framework as well. It also introduces Language-Integrated Query, a generic way to query all kinds of data in C# and Visual Basic, and full support for Windows Vista, Silverlight, and Windows Presentation Foundation.

VS08 comes in a range of editions, from the free Express Editions to the $10,000 does-everything Visual Studio Team System 2008 Team Suite. Basically, the Express editions are for beginner, student, and hobbyist developers; Standard Edition is for individual developers; Professional Edition is for advanced developers and those who work in small teams.

Team System is primarily for larger teams. There are Team System clients for developers, architects, DBAs, and testers, as well as a combined client for all roles called Team Suite. The server for Team System is Team Foundation Server (TFS), which combines a team portal, version control, work item tracking, build management, process guidance, and business intelligence.

In this review, I'll concentrate on the features of VS08 Professional Edition, and touch on a few of the highlights of Team Suite. I won't try to discuss Team Foundation Server as such, although it has received numerous enhancements, such as a new team build system and Web access, since we last reviewed it (see Tom Yager's May 2004 preview of Visual Studio 2005).

Installation and testing

For review purposes, I used three installations of VS08: Professional Edition installed on a Windows Vista for x64 laptop along with Expression Web and Expression Blend; Team Suite installed on a Windows XP desktop along with Visual Studio 2005 (VS05), without access to TFS; and Team Suite installed in a Windows Server 2003 Virtual PC along with TFS. Ninety-day trial versions of all of these versions are available from Microsoft's Web site.

I have blogged at some length (here and here) about my trials and travails installing Team Suite. None of that should affect you, unless you try to uninstall VS08 from a machine that also has VS05; nevertheless, making an image backup of your system before you start your installation might be wise. Expect a VS08 installation to take several hours, with one manual intervention required to start the documentation installation step.

Ajax Security

Ajax Security : Server Side
• AJAX-based Web applications use the same serverside security schemes of regular Web applications
• You specify authentication, authorization, and data protection requirements in your web.xml file (declarative) or in your program (programatic)
• AJAX-based Web applications are subject to the same security threats as regular Web applications
Ajax Security : Client Side
• JavaScript code is visible to a user/hacker. Hacker can use the JavaScript code for inferring server side weaknesses
• JavaScript code is downloaded from the server and executed ("eval") at the client and can compromise the client by mal-intended code
• Downloaded JavaScript code is constrained by sand-box security model and can be relaxed for signed JavaScript