-
Notifications
You must be signed in to change notification settings - Fork 183
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Explore BaseX as a demo platform #33
Comments
Wendell,
Have you considered SaxonJS on NIST Pages as a lighter-weight alternative? NIST Pages works similarly to GitHub pages, but is managed by our dev-ops team and conforms to NIST IT policies for external-facing web pages.
I’ve been using NIST Pages to deploy my Baseline Tailor XForms application (using XSLTForms). It seems to me that one might be able to do something similar with SaxonJS. This would accomplish the same goals of making demos browser-viewable without requiring Oxygen, and removing the XSLT 1.0 limitation.
Leveraging the existing NIST Pages infrastructure would save the OSCAL project the hassle of deploying an XML database on an external server.
From: Wendell Piez [mailto:notifications@github.com]
Sent: Friday, September 1, 2017 9:43 AM
To: usnistgov/OSCAL <OSCAL@noreply.github.com>
Cc: Subscribed <subscribed@noreply.github.com>
Subject: [usnistgov/OSCAL] Explore BaseX as a demo platform (#33)
So far, we have run processes only in oXygen XML editor, or in some cases (for viewing XML) in an XSLT 1.0 processor in the web browser. (Some but not all browsers will support this without special settings.) Neither of these work directly under Github; so Github visitors cannot try them without downloading files and following expert-level instructions.
For further demonstrations, it would be good to get away from both an oXygen dependency, and the limits of XSLT 1.0 (a 1998 technology) -- especially given that we have several other options including open source options. Maintaining something under Github that can also be up and running somewhere (as a live demo) is better than maintaining something there, without giving visitors a chance to try it.
One option is an XML database such as BaseX<http://www.basex.org>, run as a web server. Advantages to BaseX:
* We can deliver demos over the web that require nothing but old-fashioned browsers to run
* BaseX is performant and capable of doing everything we need regarding profiling, selection, qualification, parameter injection, etc etc in layered MVC architecture
* RestXQ interfaces are sweet: basically a URI call is translated into XQuery in back
* It's pure XML/XQuery, all XDM inside, dovetails well with XSLT
* BaseX can integrate Saxon, which gives us XSLT 3.0 (this is huge)
* Runs under Maven
Disadvantages:
* We'd have to run it somewhere (in the cloud?) for the demos to work on the open Internet. If we wish to restrict access, this complicates things further.
There are other XML databases that could conceivably work well also but I think BaseX is an especially good fit. (I am not quite proposing a platform for an implementation. But we do need something more capable and more accessible for demonstrations.)
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub<#33>, or mute the thread<https://github.com/notifications/unsubscribe-auth/AKISlpn47hgKu5lKjT5xzuLcbpyzI-rmks5seAn8gaJpZM4PKKvj>.
|
Josh, Thanks for asking about SaxonJS! Yes, I have been thinking about it; the main obstacle so far has been access to a web server but maybe you are solving that. A secondary obstacle would be that in my latest experiments, the 3.5 MB of the current OSCAL SP800-53 is a large load in SaxonJS. The big advantage, of course, would be that development of the client UI would be much much easier in SaxonJS. The truth of the matter is that even in my mind, BaseX is something of a Trojan horse since it could support SaxonJS as well (although as you say, it's heavier weight than just using httpd) -- though with the advantage that even were it serving XML and XSLT to SaxonJS (which is where I'd want to be), it could at least help manage the bandwidth issue. (For example, under the "both/and" architecture, BaseX could do the profiling, then deliver only a reduced collection of controls for SaxonJS to process.) However, that is a contingency (and a problem we do not know we have), and if we can use SaxonJS directly without the server -- I guess all I really need is access to the web server where I should drop the stuff. I guess another way your proposal is lightweight is that all the page on the NIST site would need would be a copy of the library, and pointers to files on Github. |
Noting in passing that SaxonJS is free to licensed oXygen users but not open source, so developers who wished to alter/extend/modify the demonstrations, would have that to consider. (As opposed to an XQuery application, heh.) |
Experiments with SaxonJS have confirmed it works in Github pages. However, running over an entire catalog (3.6 MB), pipelining in the browser is slow (~50 secs for profile resolution and rendering). However, we also have another alternative besides BaseX -- XProc pipelines. So we can mix and match. |
This was a valuable discussion, the conclusion of which appears to be that BaseX or other XML database may come later but in the meantime we have both pipelining techs (XProc- or build-based) and SaxonJS to explore ... |
Agreed. This will need to be a future focus. |
# The first commit's message is: # This is a combination of 54 commits. # The first commit's message is: # This is a combination of 4 commits. # The first commit's message is: # This is a combination of 2 commits. # The first commit's message is: # This is a combination of 2 commits. # The first commit's message is: # This is a combination of 6 commits. # The first commit's message is: # This is a combination of 3 commits. # The first commit's message is: # This is a combination of 111 commits. # The first commit's message is: Initial commit of docs branch. # This is the commit message #2: Create CONTRIBUTING.md # This is the commit message #3: Create ROADMAP.md # This is the commit message #4: Update README.md # This is the commit message #5: Create README.md # This is the commit message #6: Update README.md # This is the commit message #7: Update README.md # This is the commit message #8: Create OSCAL-PRODUCERS.md # This is the commit message #9: Create OSCAL-CONSUMERS.md # This is the commit message #10: Update and rename OSCAL-CONSUMERS.md to USERS.md # This is the commit message #11: Update and rename OSCAL-PRODUCERS.md to IMPLEMENTERS.md # This is the commit message #12: Rename CONTRIBUTING.md to CONTRIBUTORS.md # This is the commit message #13: Update README.md # This is the commit message #14: Update README.md # This is the commit message #15: Update USERS.md # This is the commit message #16: Update README.md # This is the commit message #17: Update IMPLEMENTERS.md # This is the commit message #18: Update README.md # This is the commit message #19: Update ROADMAP.md # This is the commit message #20: Update USERS.md # This is the commit message #21: Update CONTRIBUTORS.md # This is the commit message #22: Update README.md # This is the commit message #23: Update README.md # This is the commit message #24: Update IMPLEMENTERS.md # This is the commit message #25: Update IMPLEMENTERS.md # This is the commit message #26: Rename CONTRIBUTORS.md to CONTRIBUTING.md # This is the commit message #27: Create control.md # This is the commit message #28: Update control.md # This is the commit message #29: Update control.md # This is the commit message #30: Update control.md # This is the commit message #31: Update control.md # This is the commit message #32: Add files via upload # This is the commit message #33: Update control.md # This is the commit message #34: Create temp.md # This is the commit message #35: Delete NIST-SP-800-53-Rev4-AC1.png # This is the commit message #36: Add files via upload # This is the commit message #37: Delete temp.md # This is the commit message #38: Add files via upload # This is the commit message #39: Update control.md # This is the commit message #40: Add files via upload # This is the commit message #41: Add files via upload # This is the commit message #42: Update control.md # This is the commit message #43: Update CONTRIBUTING.md # This is the commit message #44: Update CONTRIBUTING.md # This is the commit message #45: Update USERS.md # This is the commit message #46: Update CONTRIBUTING.md # This is the commit message #47: Delete CONTRIBUTING.md # This is the commit message #48: Delete USERS.md # This is the commit message #49: Add files via upload # This is the commit message #50: Delete CSA-CCM-IAM02.png # This is the commit message #51: Update control.md # This is the commit message #52: Update control.md # This is the commit message #53: Update control.md # This is the commit message #54: Update control.md # This is the commit message #55: Update control.md # This is the commit message #56: Update control.md # This is the commit message #57: Update control.md # This is the commit message #58: Update control.md # This is the commit message #59: Update control.md # This is the commit message #60: Update control.md # This is the commit message #61: Delete NIST-SP-800-53-AC1-in-OSCAL-XML.png # This is the commit message #62: Update README.md # This is the commit message #63: Update control.md # This is the commit message #64: Update control.md # This is the commit message #65: Add files via upload # This is the commit message #66: Delete ISO-27001-Control-A9.png # This is the commit message #67: Update control.md # This is the commit message #68: Add files via upload # This is the commit message #69: Add files via upload # This is the commit message #70: Delete ISO-27002-Control-9.1.1-part1.png # This is the commit message #71: Delete ISO-27002-Control-9.1.1-part2.png # This is the commit message #72: Update control.md # This is the commit message #73: Update control.md # This is the commit message #74: Update control.md # This is the commit message #75: Update control.md # This is the commit message #76: Update control.md # This is the commit message #77: Update README.md # This is the commit message #78: Update IMPLEMENTERS.md # This is the commit message #79: Add files via upload # This is the commit message #80: Delete oscal-layers.png # This is the commit message #81: Add files via upload # This is the commit message #82: Delete oscal-layers.png # This is the commit message #83: Add files via upload # This is the commit message #84: Update IMPLEMENTERS.md # This is the commit message #85: Update control.md # This is the commit message #86: Update IMPLEMENTERS.md # This is the commit message #87: Update control.md # This is the commit message #88: Rename IMPLEMENTERS.md to docs/prose/IMPLEMENTERS.md # This is the commit message #89: Rename IMPLEMENTERS.md to implementers.md # This is the commit message #90: Rearranged and outlined catalog documentation based on the conversation with karen and Wendell. # This is the commit message #91: Create catalog-xml.md # This is the commit message #92: Rename control.md to catalog.md # This is the commit message #93: Update catalog.md # This is the commit message #94: Update catalog.md # This is the commit message #95: Update catalog.md # This is the commit message #96: Update catalog-xml.md # This is the commit message #97: Update catalog-xml.md # This is the commit message #98: Update catalog-xml.md # This is the commit message #99: Update catalog-xml.md # This is the commit message #100: Update catalog-xml.md # This is the commit message #101: Update catalog-xml.md # This is the commit message #102: Update catalog-xml.md # This is the commit message #103: Update catalog-xml.md # This is the commit message #104: Update catalog-xml.md # This is the commit message #105: Update catalog-xml.md # This is the commit message #106: Docset migration to Slate # This is the commit message #107: Removing unused file. # This is the commit message #108: Update README.md Corrected a typo # This is the commit message #109: Add files via upload Graphical representation of OSCAL schemas aligned with Risk Management Framework steps and tasks. # This is the commit message #110: Create CONTRIBUTING.md # This is the commit message #111: Create ROADMAP.md # This is the commit message #2: Create README.md # This is the commit message #3: Update README.md # This is the commit message #2: Create OSCAL-PRODUCERS.md # This is the commit message #3: Create OSCAL-CONSUMERS.md # This is the commit message #4: Update and rename OSCAL-CONSUMERS.md to USERS.md # This is the commit message #5: Update and rename OSCAL-PRODUCERS.md to IMPLEMENTERS.md # This is the commit message #6: Rename CONTRIBUTING.md to CONTRIBUTORS.md # This is the commit message #2: Update USERS.md # This is the commit message #2: Update IMPLEMENTERS.md # This is the commit message #2: Update ROADMAP.md # This is the commit message #3: Update USERS.md # This is the commit message #4: Update CONTRIBUTORS.md # This is the commit message #2: Update IMPLEMENTERS.md # This is the commit message #3: Update IMPLEMENTERS.md # This is the commit message #4: Rename CONTRIBUTORS.md to CONTRIBUTING.md # This is the commit message #5: Create control.md # This is the commit message #6: Update control.md # This is the commit message #7: Update control.md # This is the commit message #8: Update control.md # This is the commit message #9: Update control.md # This is the commit message #10: Add files via upload # This is the commit message #11: Update control.md # This is the commit message #12: Create temp.md # This is the commit message #13: Delete NIST-SP-800-53-Rev4-AC1.png # This is the commit message #14: Add files via upload # This is the commit message #15: Delete temp.md # This is the commit message #16: Add files via upload # This is the commit message #17: Update control.md # This is the commit message #18: Add files via upload # This is the commit message #19: Add files via upload # This is the commit message #20: Update control.md # This is the commit message #21: Update CONTRIBUTING.md # This is the commit message #22: Update CONTRIBUTING.md # This is the commit message #23: Update USERS.md # This is the commit message #24: Update CONTRIBUTING.md # This is the commit message #25: Delete CONTRIBUTING.md # This is the commit message #26: Delete USERS.md # This is the commit message #27: Add files via upload # This is the commit message #28: Delete CSA-CCM-IAM02.png # This is the commit message #29: Update control.md # This is the commit message #30: Update control.md # This is the commit message #31: Update control.md # This is the commit message #32: Update control.md # This is the commit message #33: Update control.md # This is the commit message #34: Update control.md # This is the commit message #35: Update control.md # This is the commit message #36: Update control.md # This is the commit message #37: Update control.md # This is the commit message #38: Update control.md # This is the commit message #39: Delete NIST-SP-800-53-AC1-in-OSCAL-XML.png # This is the commit message #40: Update README.md # This is the commit message #41: Update control.md # This is the commit message #42: Update control.md # This is the commit message #43: Add files via upload # This is the commit message #44: Delete ISO-27001-Control-A9.png # This is the commit message #45: Update control.md # This is the commit message #46: Add files via upload # This is the commit message #47: Add files via upload # This is the commit message #48: Delete ISO-27002-Control-9.1.1-part1.png # This is the commit message #49: Delete ISO-27002-Control-9.1.1-part2.png # This is the commit message #50: Update control.md # This is the commit message #51: Update control.md # This is the commit message #52: Update control.md # This is the commit message #53: Update control.md # This is the commit message #54: Update control.md # This is the commit message #2: Update IMPLEMENTERS.md # This is the commit message #3: Add files via upload # This is the commit message #4: Delete oscal-layers.png # This is the commit message #5: Add files via upload # This is the commit message #6: Delete oscal-layers.png # This is the commit message #7: Add files via upload # This is the commit message #8: Update IMPLEMENTERS.md # This is the commit message #9: Update control.md # This is the commit message #10: Update IMPLEMENTERS.md # This is the commit message #11: Update control.md # This is the commit message #12: Rename IMPLEMENTERS.md to docs/prose/IMPLEMENTERS.md # This is the commit message #13: Rename IMPLEMENTERS.md to implementers.md # This is the commit message #14: Rearranged and outlined catalog documentation based on the conversation with karen and Wendell. # This is the commit message #15: Create catalog-xml.md # This is the commit message #16: Rename control.md to catalog.md # This is the commit message #17: Update catalog.md # This is the commit message #18: Update catalog.md # This is the commit message #19: Update catalog.md # This is the commit message #20: Update catalog-xml.md # This is the commit message #21: Update catalog-xml.md # This is the commit message #22: Update catalog-xml.md # This is the commit message #23: Update catalog-xml.md # This is the commit message #24: Update catalog-xml.md # This is the commit message #25: Update catalog-xml.md # This is the commit message #26: Update catalog-xml.md # This is the commit message #27: Update catalog-xml.md # This is the commit message #28: Update catalog-xml.md # This is the commit message #29: Fixed typos, updated repo documentation, and migrated documentation for use in Slate. Corrected a typo (+4 squashed commit) Squashed commit: [6ada57f] Removing unused file. [503ad71] Docset migration to Slate [351257e] Update catalog-xml.md [aae1e8b] Add files via upload Graphical representation of OSCAL schemas aligned with Risk Management Framework steps and tasks.
# The first commit's message is: Restructuring for new initiative Moved everything into 'old' and added a new subdirectory for new experiments. More early iteration over names More adjustments in names mostly HTML page for Word import testing Just touchups this time Updates and misc improvements Changed document element to 'catalog' Improved and renamed mapping transformation Adjustments to models, schema, Schematron Managing gitignore Same Minor adjustments First cut at 27K mapping into OSCAL Renamed directories for consistency Cleanup Bit more cleanup Adjustments to mapping Same Numerous enhancements, some reorg Planning notes Added starter FO XSLT First cut at FO XSL Minor improvements Small adjustments Many/much schema enhancements; proto XSD version First cut at inline declarations with live validation Implementing declarations; styling Refinements and extensions; new assign, select, withdrawn elements More support for parameters etc. Now implementing parameters etc. More touches Misc improvements Sundry adjustments Many more small improvements Much documentation More touchups Updates Misc adjustments and notes Significant rework following design session esp declarations More improvements incl extending declarations to groups More adjustments; now mapping SP800-53A also. More polishing and maintenance Much more including hierarchical number checking Adjustments, extensions, corrections Name changes in the model More adjustments Cleanup of obsolete artifacts Minor alignment Mostly CSS, also Schematron improvements ISO27002 mapping document Many enhancements; new COBIT 5 mappings More on COBIT Improvements to mapping docs Adjustments to mappings incl HTML versions Moved screenshot for documentation More adjustments and docs Mostly improvements to documentation Refreshed 800-53 data with adjustments More general improvements to models and mappings Continuing refinements to validations in samples Update README.md Update README.md Update README.md Update README.md Minor tweaks Including initial cut at profiling (1st, rule-based control extraction) among other refinements and improvements No longer extant Added new control to COBIT5 example Misc improvements including more COBIT5 support File rename and further adjustments Misc adjustment; SaxonJS demo files Misc adjustments Updated readme contents to reflect merge. Fixed links. Changed text to better reflect current state and to add more links. Rearrangement and cleanup Schematron and schema adjustment and refactoring SP800-53 extraction improvement, enhancement, cleanup Improvements and enhancements to ISO27002 extraction OSCAL Documentation COBIT5 example tweakage Organizational notes Adjustments Removed old files directory. Moved files from draft to root. Updated README.md to reflect new pathing. Updated readme to contain more documentation of the OSCAL layers. Added documentation for the working directory. Update README.md Edited the text. Update README.md Edited the text. Added Aug 10 tiger team slides with notes Create a prose overview of OSCAL Update OSCAL Overview.md Update OSCAL Overview.md Profile and catalog mapping: a trivial example Replacing graphic with rescaled version Update OSCAL Overview.md Rescaled image Update OSCAL Overview.md Mods to oXygen project file Removing 'demo' (till later) Moved proprietary file Refinements to ISO27002 mappings (new model) Refining SP800-53 conversion/mappings Updating lib support for new model Top-level org Draft readme docs Further adjustment to directory readme.md More adjustments to ISO 27002 and SP800-53 (new model etc.) More cleanup to main sample subdirectories + readme tweakage Mostly restructuring More adjustments to extraction, parameter support Includes more model refinements; draft implementation of parameter resolution Adjustments for revised models Adjustments to demos and conversion pipelines Experimenting with profiles Infrastructure adjustments Schema modifications # This is the commit message #2: Minor correction to schema docs merge # This is the commit message #3: Updating XSD w/ docs # This is the commit message #4: More element renaming/adjustment # This is the commit message #5: Now a stable schema again? With SP800-53 extraction adjustments # This is the commit message #6: Profile-related mods # This is the commit message #7: Org stuff # This is the commit message #8: Moved mappind docs; added readme # This is the commit message #9: schema documentation # This is the commit message #10: Schema production and documentation pipeline # This is the commit message #11: More reorg; tweaked schema; more docs # This is the commit message #12: Improvements to tag library # This is the commit message #13: Another attempt at internal links in md # This is the commit message #14: trying again # This is the commit message #15: Gonna get this eventually # This is the commit message #16: More updates and tuneups # This is the commit message #17: More updates to schema and docs # This is the commit message #18: Lighter adjustments # This is the commit message #19: Similarly subtle adjustments # This is the commit message #20: Adjustments supporting parameter assignments # This is the commit message #21: More docs # This is the commit message #22: Enhancements to demo # This is the commit message #23: Moving distractions out of the way # This is the commit message #24: Slight readme tweakage # This is the commit message #25: Tag library tweaks # This is the commit message #26: More tag library adjustments # This is the commit message #27: New readme for Schematrons # This is the commit message #28: Adjustments to readme # This is the commit message #29: Adjustments to mapping documents # This is the commit message #30: Adjustments to readme # This is the commit message #31: More adjustments to mapping documents # This is the commit message #32: Updated punchlist # This is the commit message #33: Updates to mapping docs # This is the commit message #34: # This is the commit message #35: CSS for local editing of OSCAL OSCAL # This is the commit message #36: Slight adjustments # This is the commit message #37: Light editing # This is the commit message #38: Light editing # This is the commit message #39: Light edits # This is the commit message #40: Light edits # This is the commit message #41: Light edits # This is the commit message #42: Light edits # This is the commit message #43: More work on profiles # This is the commit message #44: Revised directory descriptions # This is the commit message #45: Added an explanation of the demo directories # This is the commit message #46: More on profiling # This is the commit message #47: Editorial tweaks to oscal-oscal.xml # This is the commit message #48: Editorial tweaks to oscal-oscal.xml # This is the commit message #49: Edits to schema documentation # This is the commit message #50: More enhancements to tag library and its presentation # This is the commit message #51: Internal links? # This is the commit message #52: Slight adjustments # This is the commit message #53: Further touchups to schema docs and their HTML rendering # This is the commit message #54: Support for 'pre' # This is the commit message #55: Rearranged and touched up profile experiments # This is the commit message #56: More touchups to tag library (linking) # This is the commit message #57: More adjustments to copy # This is the commit message #58: More adjustments # This is the commit message #59: Correcting display bug failing to render chars in CSS # This is the commit message #60: Added a PDF with the notes.
# The first commit's message is: # This is a combination of 60 commits. # The first commit's message is: # This is a combination of 17 commits. # The first commit's message is: Restructuring for new initiative Moved everything into 'old' and added a new subdirectory for new experiments. More early iteration over names More adjustments in names mostly HTML page for Word import testing Just touchups this time Updates and misc improvements Changed document element to 'catalog' Improved and renamed mapping transformation Adjustments to models, schema, Schematron Managing gitignore Same Minor adjustments First cut at 27K mapping into OSCAL Renamed directories for consistency Cleanup Bit more cleanup Adjustments to mapping Same Numerous enhancements, some reorg Planning notes Added starter FO XSLT First cut at FO XSL Minor improvements Small adjustments Many/much schema enhancements; proto XSD version First cut at inline declarations with live validation Implementing declarations; styling Refinements and extensions; new assign, select, withdrawn elements More support for parameters etc. Now implementing parameters etc. More touches Misc improvements Sundry adjustments Many more small improvements Much documentation More touchups Updates Misc adjustments and notes Significant rework following design session esp declarations More improvements incl extending declarations to groups More adjustments; now mapping SP800-53A also. More polishing and maintenance Much more including hierarchical number checking Adjustments, extensions, corrections Name changes in the model More adjustments Cleanup of obsolete artifacts Minor alignment Mostly CSS, also Schematron improvements ISO27002 mapping document Many enhancements; new COBIT 5 mappings More on COBIT Improvements to mapping docs Adjustments to mappings incl HTML versions Moved screenshot for documentation More adjustments and docs Mostly improvements to documentation Refreshed 800-53 data with adjustments More general improvements to models and mappings Continuing refinements to validations in samples Update README.md Update README.md Update README.md Update README.md Minor tweaks Including initial cut at profiling (1st, rule-based control extraction) among other refinements and improvements No longer extant Added new control to COBIT5 example Misc improvements including more COBIT5 support File rename and further adjustments Misc adjustment; SaxonJS demo files Misc adjustments Updated readme contents to reflect merge. Fixed links. Changed text to better reflect current state and to add more links. Rearrangement and cleanup Schematron and schema adjustment and refactoring SP800-53 extraction improvement, enhancement, cleanup Improvements and enhancements to ISO27002 extraction OSCAL Documentation COBIT5 example tweakage Organizational notes Adjustments Removed old files directory. Moved files from draft to root. Updated README.md to reflect new pathing. Updated readme to contain more documentation of the OSCAL layers. Added documentation for the working directory. Update README.md Edited the text. Update README.md Edited the text. Added Aug 10 tiger team slides with notes Create a prose overview of OSCAL Update OSCAL Overview.md Update OSCAL Overview.md Profile and catalog mapping: a trivial example Replacing graphic with rescaled version Update OSCAL Overview.md Rescaled image Update OSCAL Overview.md Mods to oXygen project file Removing 'demo' (till later) # This is the commit message #2: Moved proprietary file # This is the commit message #3: Refinements to ISO27002 mappings (new model) # This is the commit message #4: Refining SP800-53 conversion/mappings # This is the commit message #5: Updating lib support for new model # This is the commit message #6: Top-level org # This is the commit message #7: Draft readme docs # This is the commit message #8: Further adjustment to directory readme.md # This is the commit message #9: More adjustments to ISO 27002 and SP800-53 (new model etc.) # This is the commit message #10: More cleanup to main sample subdirectories + readme tweakage # This is the commit message #11: Mostly restructuring # This is the commit message #12: More adjustments to extraction, parameter support # This is the commit message #13: Includes more model refinements; draft implementation of parameter resolution # This is the commit message #14: Adjustments for revised models # This is the commit message #15: Adjustments to demos and conversion pipelines # This is the commit message #16: Experimenting with profiles # This is the commit message #17: Infrastructure adjustments # This is the commit message #2: Minor correction to schema docs merge # This is the commit message #3: Updating XSD w/ docs # This is the commit message #4: More element renaming/adjustment # This is the commit message #5: Now a stable schema again? With SP800-53 extraction adjustments # This is the commit message #6: Profile-related mods # This is the commit message #7: Org stuff # This is the commit message #8: Moved mappind docs; added readme # This is the commit message #9: schema documentation # This is the commit message #10: Schema production and documentation pipeline # This is the commit message #11: More reorg; tweaked schema; more docs # This is the commit message #12: Improvements to tag library # This is the commit message #13: Another attempt at internal links in md # This is the commit message #14: trying again # This is the commit message #15: Gonna get this eventually # This is the commit message #16: More updates and tuneups # This is the commit message #17: More updates to schema and docs # This is the commit message #18: Lighter adjustments # This is the commit message #19: Similarly subtle adjustments # This is the commit message #20: Adjustments supporting parameter assignments # This is the commit message #21: More docs # This is the commit message #22: Enhancements to demo # This is the commit message #23: Moving distractions out of the way # This is the commit message #24: Slight readme tweakage # This is the commit message #25: Tag library tweaks # This is the commit message #26: More tag library adjustments # This is the commit message #27: New readme for Schematrons # This is the commit message #28: Adjustments to readme # This is the commit message #29: Adjustments to mapping documents # This is the commit message #30: Adjustments to readme # This is the commit message #31: More adjustments to mapping documents # This is the commit message #32: Updated punchlist # This is the commit message #33: Updates to mapping docs # This is the commit message #34: # This is the commit message #35: CSS for local editing of OSCAL OSCAL # This is the commit message #36: Slight adjustments # This is the commit message #37: Light editing # This is the commit message #38: Light editing # This is the commit message #39: Light edits # This is the commit message #40: Light edits # This is the commit message #41: Light edits # This is the commit message #42: Light edits # This is the commit message #43: More work on profiles # This is the commit message #44: Revised directory descriptions # This is the commit message #45: Added an explanation of the demo directories # This is the commit message #46: More on profiling # This is the commit message #47: Editorial tweaks to oscal-oscal.xml # This is the commit message #48: Editorial tweaks to oscal-oscal.xml # This is the commit message #49: Edits to schema documentation # This is the commit message #50: More enhancements to tag library and its presentation # This is the commit message #51: Internal links? # This is the commit message #52: Slight adjustments # This is the commit message #53: Further touchups to schema docs and their HTML rendering # This is the commit message #54: Support for 'pre' # This is the commit message #55: Rearranged and touched up profile experiments # This is the commit message #56: More touchups to tag library (linking) # This is the commit message #57: More adjustments to copy # This is the commit message #58: More adjustments # This is the commit message #59: Correcting display bug failing to render chars in CSS # This is the commit message #60: Added a PDF with the notes. # This is the commit message #2: Decided to risk it # This is the commit message #3: One more readme
# The first commit's message is: # This is a combination of 4 commits. # The first commit's message is: # This is a combination of 60 commits. # The first commit's message is: # This is a combination of 17 commits. # The first commit's message is: Restructuring for new initiative Moved everything into 'old' and added a new subdirectory for new experiments. More early iteration over names More adjustments in names mostly HTML page for Word import testing Just touchups this time Updates and misc improvements Changed document element to 'catalog' Improved and renamed mapping transformation Adjustments to models, schema, Schematron Managing gitignore Same Minor adjustments First cut at 27K mapping into OSCAL Renamed directories for consistency Cleanup Bit more cleanup Adjustments to mapping Same Numerous enhancements, some reorg Planning notes Added starter FO XSLT First cut at FO XSL Minor improvements Small adjustments Many/much schema enhancements; proto XSD version First cut at inline declarations with live validation Implementing declarations; styling Refinements and extensions; new assign, select, withdrawn elements More support for parameters etc. Now implementing parameters etc. More touches Misc improvements Sundry adjustments Many more small improvements Much documentation More touchups Updates Misc adjustments and notes Significant rework following design session esp declarations More improvements incl extending declarations to groups More adjustments; now mapping SP800-53A also. More polishing and maintenance Much more including hierarchical number checking Adjustments, extensions, corrections Name changes in the model More adjustments Cleanup of obsolete artifacts Minor alignment Mostly CSS, also Schematron improvements ISO27002 mapping document Many enhancements; new COBIT 5 mappings More on COBIT Improvements to mapping docs Adjustments to mappings incl HTML versions Moved screenshot for documentation More adjustments and docs Mostly improvements to documentation Refreshed 800-53 data with adjustments More general improvements to models and mappings Continuing refinements to validations in samples Update README.md Update README.md Update README.md Update README.md Minor tweaks Including initial cut at profiling (1st, rule-based control extraction) among other refinements and improvements No longer extant Added new control to COBIT5 example Misc improvements including more COBIT5 support File rename and further adjustments Misc adjustment; SaxonJS demo files Misc adjustments Updated readme contents to reflect merge. Fixed links. Changed text to better reflect current state and to add more links. Rearrangement and cleanup Schematron and schema adjustment and refactoring SP800-53 extraction improvement, enhancement, cleanup Improvements and enhancements to ISO27002 extraction OSCAL Documentation COBIT5 example tweakage Organizational notes Adjustments Removed old files directory. Moved files from draft to root. Updated README.md to reflect new pathing. Updated readme to contain more documentation of the OSCAL layers. Added documentation for the working directory. Update README.md Edited the text. Update README.md Edited the text. Added Aug 10 tiger team slides with notes Create a prose overview of OSCAL Update OSCAL Overview.md Update OSCAL Overview.md Profile and catalog mapping: a trivial example Replacing graphic with rescaled version Update OSCAL Overview.md Rescaled image Update OSCAL Overview.md Mods to oXygen project file Removing 'demo' (till later) # This is the commit message #2: Moved proprietary file # This is the commit message #3: Refinements to ISO27002 mappings (new model) # This is the commit message #4: Refining SP800-53 conversion/mappings # This is the commit message #5: Updating lib support for new model # This is the commit message #6: Top-level org # This is the commit message #7: Draft readme docs # This is the commit message #8: Further adjustment to directory readme.md # This is the commit message #9: More adjustments to ISO 27002 and SP800-53 (new model etc.) # This is the commit message #10: More cleanup to main sample subdirectories + readme tweakage # This is the commit message #11: Mostly restructuring # This is the commit message #12: More adjustments to extraction, parameter support # This is the commit message #13: Includes more model refinements; draft implementation of parameter resolution # This is the commit message #14: Adjustments for revised models # This is the commit message #15: Adjustments to demos and conversion pipelines # This is the commit message #16: Experimenting with profiles # This is the commit message #17: Infrastructure adjustments # This is the commit message #2: Minor correction to schema docs merge # This is the commit message #3: Updating XSD w/ docs # This is the commit message #4: More element renaming/adjustment # This is the commit message #5: Now a stable schema again? With SP800-53 extraction adjustments # This is the commit message #6: Profile-related mods # This is the commit message #7: Org stuff # This is the commit message #8: Moved mappind docs; added readme # This is the commit message #9: schema documentation # This is the commit message #10: Schema production and documentation pipeline # This is the commit message #11: More reorg; tweaked schema; more docs # This is the commit message #12: Improvements to tag library # This is the commit message #13: Another attempt at internal links in md # This is the commit message #14: trying again # This is the commit message #15: Gonna get this eventually # This is the commit message #16: More updates and tuneups # This is the commit message #17: More updates to schema and docs # This is the commit message #18: Lighter adjustments # This is the commit message #19: Similarly subtle adjustments # This is the commit message #20: Adjustments supporting parameter assignments # This is the commit message #21: More docs # This is the commit message #22: Enhancements to demo # This is the commit message #23: Moving distractions out of the way # This is the commit message #24: Slight readme tweakage # This is the commit message #25: Tag library tweaks # This is the commit message #26: More tag library adjustments # This is the commit message #27: New readme for Schematrons # This is the commit message #28: Adjustments to readme # This is the commit message #29: Adjustments to mapping documents # This is the commit message #30: Adjustments to readme # This is the commit message #31: More adjustments to mapping documents # This is the commit message #32: Updated punchlist # This is the commit message #33: Updates to mapping docs # This is the commit message #34: # This is the commit message #35: CSS for local editing of OSCAL OSCAL # This is the commit message #36: Slight adjustments # This is the commit message #37: Light editing # This is the commit message #38: Light editing # This is the commit message #39: Light edits # This is the commit message #40: Light edits # This is the commit message #41: Light edits # This is the commit message #42: Light edits # This is the commit message #43: More work on profiles # This is the commit message #44: Revised directory descriptions # This is the commit message #45: Added an explanation of the demo directories # This is the commit message #46: More on profiling # This is the commit message #47: Editorial tweaks to oscal-oscal.xml # This is the commit message #48: Editorial tweaks to oscal-oscal.xml # This is the commit message #49: Edits to schema documentation # This is the commit message #50: More enhancements to tag library and its presentation # This is the commit message #51: Internal links? # This is the commit message #52: Slight adjustments # This is the commit message #53: Further touchups to schema docs and their HTML rendering # This is the commit message #54: Support for 'pre' # This is the commit message #55: Rearranged and touched up profile experiments # This is the commit message #56: More touchups to tag library (linking) # This is the commit message #57: More adjustments to copy # This is the commit message #58: More adjustments # This is the commit message #59: Correcting display bug failing to render chars in CSS # This is the commit message #60: Added a PDF with the notes. # This is the commit message #2: Decided to risk it # This is the commit message #3: One more readme # This is the commit message #4: Added timestamping to extractors # This is the commit message #2: Light edits to oscal-oscal.xml # This is the commit message #3: More edits to oscal-oscal.xml with regenerated materials # This is the commit message #4: Refining markdown export # This is the commit message #5: More edits to docs and rendering # This is the commit message #6: This time smaller adjustments # This is the commit message #7: More improvements to docs and rendering
So far, we have run processes only in oXygen XML editor, or in some cases (for viewing XML) in an XSLT 1.0 processor in the web browser. (Some but not all browsers will support this without special settings.) Neither of these work directly under Github; so Github visitors cannot try them without downloading files and following expert-level instructions.
For further demonstrations, it would be good to get away from both an oXygen dependency, and the limits of XSLT 1.0 (a 1998 technology) -- especially given that we have several other options including open source options. Maintaining something under Github that can also be up and running somewhere (as a live demo) is better than maintaining something there, without giving visitors a chance to try it.
One option is an XML database such as BaseX, run as a web server. Advantages to BaseX:
Disadvantages:
There are other XML databases that could conceivably work well also but I think BaseX is an especially good fit. (I am not quite proposing a platform for an implementation. But we do need something more capable and more accessible for demonstrations.)
The text was updated successfully, but these errors were encountered: