WO2021120538A1

WO2021120538A1 - Applet code scanning method and apparatus

Info

Publication number: WO2021120538A1
Application number: PCT/CN2020/094680
Authority: WO
Inventors: 高诗林
Original assignee: 支付宝(杭州)信息技术有限公司
Priority date: 2019-12-19
Filing date: 2020-06-05
Publication date: 2021-06-24
Also published as: TWI768343B; CN111143204B; TW202125255A; CN111143204A

Abstract

Embodiments of the present description provide an applet code scanning method and apparatus. The method comprises: receiving a code scanning request sent by a client, the code scanning request carrying applet code to be scanned; parsing the applet code to obtain code modules; and separately detecting the code modules on the basis of a scanning rule to obtain a scanning result of the applet code.

Description

Method and device for scanning small program code

Technical field

This specification relates to the field of computer technology, and in particular to a method and device for scanning small program codes.

Background technique

The applet manager can open the applet entrance to third-party developers, and third-party developers (for example, enterprise or individual developers) can write applets and access the written applets in the application of the applet manager. program. However, due to the uneven level of third-party developers, many small programs developed by these third-party developers have white screens and crashes caused by code problems. Therefore, only by managing the quality of the applet code can users better use the applet.

Summary of the invention

In view of this, this specification provides a small program code scanning method and device to improve the quality of the small program code.

Specifically, one or more embodiments of this specification are implemented through the following technical solutions:

In a first aspect, a method for scanning code of an applet is provided. The method includes:

Receiving a code scan request sent by the client, where the code scan request carries a small program code to be scanned;

Parse the applet code to obtain each code module;

The respective code modules are respectively detected based on the scanning rule, and the scanning result of the small program code is obtained.

In a second aspect, a method for scanning code of an applet is provided, the method including:

Obtain the small program code corresponding to the currently edited file;

Sending a code scan request to the server, where the code scan request carries the applet code;

Receiving the scan result of the applet code returned by the server.

In a third aspect, a small program code scanning device is provided, and the device includes:

The request receiving module is configured to receive a code scan request sent by the client, where the code scan request carries the small program code to be scanned;

The code analysis module is used to parse the applet code to obtain each code module;

The scanning processing module is used to detect the respective code modules based on the scanning rules to obtain the scanning result of the small program code.

In a fourth aspect, a small program code scanning device is provided, and the device includes:

The code acquisition module is used to acquire the small program code corresponding to the currently edited file;

The request sending module is configured to send a code scan request to the server, where the code scan request carries the small program code;

The result receiving module is used to receive the scanning result of the applet code returned by the server.

In a fifth aspect, a small program code scanning device is provided. The device includes a memory, a processor, and computer instructions that are stored in the memory and can run on the processor. The processor implements any of the instructions in this specification when executing the instructions. The small program code scanning method described in the embodiment, or the small program code scanning method described in any embodiment of this specification can be implemented.

The code scanning method and device of the applet in one or more embodiments of this specification, by sending the applet code to the server for scanning by the scanning plug-in, the code writing defects in the applet code can be detected in time, and the code writing defects in the applet code can be detected in time, and timely This defect is displayed to users for improvement, so as to avoid various types of small program application problems such as white screen and flashback caused by small program code defects, and improve the quality of the small program code.

Description of the drawings

In order to more clearly explain one or more embodiments of this specification or the technical solutions in the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, in the following description The drawings are only some of the embodiments described in one or more embodiments of this specification. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative labor. .

FIG. 1 is a process of scanning and detecting applet code provided by one or more embodiments of this specification;

Figure 2 is a schematic structural diagram of a small program code scanning device provided by one or more embodiments of this specification;

FIG. 3 is a schematic structural diagram of a small program code scanning device provided by one or more embodiments of this specification.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions in one or more embodiments of this specification, the following will be combined with the drawings in one or more embodiments of this specification to compare the technical solutions in one or more embodiments of this specification. The technical solution is described clearly and completely. Obviously, the described embodiments are only a part of the embodiments, rather than all of the embodiments. Based on one or more embodiments of this specification, all other embodiments obtained by a person of ordinary skill in the art without creative work shall fall within the protection scope of this specification.

The embodiment of this specification provides a code scanning method for a small program, which can perform defect detection on the code of the small program developed by the developer, so as to avoid problems such as white screen and flashback caused by the code writing defect of the small program.

For example, developers can develop small program software through IDE (Integrated Development Environment, integrated development environment), and a scanning plug-in can be installed in the small program IDE, and the scanning plug-in can be used to initiate a small program edited in the IDE to the server Code scan request for the code. The server can scan and detect the code of the applet according to the code scanning request sent by the scanning plug-in.

Please refer to Figure 1. Figure 1 illustrates the process of scanning and detecting the applet code that is executed interactively between the scanning plug-in and the server. The small program code scanning method may include the following processing:

In step 100, the scanning plug-in receives a scanning request.

For example, a developer of applet software is developing an applet in the IDE. When the developer wants to detect whether the applet code he has written has code defects, he can initiate a scan request for the applet code through the scanning plug-in in the IDE.

Exemplarily, after the scanning plug-in is installed in the IDE, the user can see an option for choosing whether to initiate a code scan, and the user can trigger the initiation of a scan request for the code of the small program being edited by clicking this option. When the user clicks the scan option, the scan plug-in receives the scan request.

In step 102, the scanning plug-in encrypts the small program code requested to be scanned.

For example, in order to ensure the security of the small program code to be scanned during transmission to the server, the small program code may be encrypted before being sent to the scanning server. Encryption methods include, but are not limited to, symmetric encryption, asymmetric encryption, and session authentication.

In addition, when the scan plug-in receives a scan request initiated by the user, if there is no small program code file currently being opened for editing, it may not respond, that is, not scan.

In step 104, the scanning plug-in sends a code scanning request to the server, and the code scanning request carries the encrypted applet code.

In this step, the scanning plug-in can send the encrypted small program code to the server, requesting the server to scan the small program code to detect whether there are code defects.

In step 106, the server decrypts to obtain the applet code.

In this step, after receiving the code scanning request sent by the scanning plug-in, the server can decrypt the encrypted small program code carried in the code scanning request to obtain the small program code to be scanned. In addition, the scanning plug-in is installed in the small program IDE, which is equivalent to the client of the code scanning. Therefore, it can also be called the server of the code scanning to receive the code scanning request sent by the client.

In step 108, the server parses the applet code to obtain each code module.

Specifically, the server can disassemble the small program code to be scanned.

When the applet code is written, it is written in accordance with the applet API (Application Programming Interface) and specifications. For example, the following are examples of the code specifications of some small programs: the layout of the small program uses flex layout during the development process; the JS statement does not need to end with a semicolon; the callback function is written in the same way as the Promise function, and the parameters for the successful callback are unified as res, and error The parameter is err. The query request can be executed through the API "selectorQuery.exec", etc. The above is only an example.

The server can disassemble the applet code according to the applet code writing specification, and disassemble each code module to make it easier to scan and detect the disassembled code modules.

In an example, each code module of the small program code can be disassembled level by level to obtain each code module in a tree-like hierarchy. Examples are as follows:

For example, you can analyze which pages are in a small program code. For each page, which variable definitions and function definitions are included in the page. For each function definition, which code blocks are included. Which conditional branch logic blocks are included in each code block. What expressions are included in each logical branch block, and the specific composition of each type of expression.

In the following example, a small program code can include page1 and page2. Taking page2 as an example, page2 includes the definition of variable 1 and variable 2, as well as the definition of function 1 and function 2. Continuing to take function 2 as an example, the definition of function 2 also includes code block 1 and code block 2, where code block 2 includes logic branch 1 and logic branch 2. Further, the logic branch 2 includes expression 1 and expression 2, and expression 2 includes variable definition expressions, variable assignment expressions, and error handling expressions. The variable definition expression includes the assigned variable a and the assigned variable b.

The above small program code analysis is a level-by-level analysis method. The page is equivalent to the highest level. The next level of the page is the definition of the variables and functions included in the page. Continue to the next level. For example, the function includes , And so on, until it is disassembled to a lower-level fine-grained code block in the applet code, such as a variable in an expression.

This level-by-level disassembly method can finally disassemble the small program code to obtain the various code modules of the tree-like hierarchical structure. Among them, the highest level is equivalent to the trunk of the big tree, and the lower level is equivalent to the big tree. branches and leaves. Both high-level and low-level can be called individual code modules. For example, function definitions can be higher-level code modules, and logical branch blocks can be lower-level code modules.

In step 110, the server separately detects each code module based on the scanning rules, and obtains the scanning result of the mini program code.

In this step, the server may store some scanning rules for scanning the applet code. For example, "variables used should be defined in the context" can be used as a scanning rule. If a variable that is not defined in the context is used in the applet code, this usage will not prevent the applet from running, but it does exist Potential white screen risk, code scanning can prompt the user "there are undefined variables".

For example, the server can traverse the various scanning rules of the stored applet code, and each scanning rule can correspond to a requirement for writing the applet code. By scanning the applet code according to the scanning rules, the applet code can be detected. Whether there are defects in the coding.

For example, the scanning result obtained by the server scanning and detecting each code module can be whether it meets the requirements of each scanning rule. For example, the scanning result in the above example can be "there is an undefined variable", or it can be other undefined variables. Comply with the code writing specifications of the mini program.

In step 112, the server returns the scanning result to the scanning plug-in.

In step 114, the scanning plug-in displays the scanning result through the small program IDE.

In this step, the scanning plug-in can display the scan results on the applet IDE. For example, in the above example, the scanning plug-in can display "undefined variables exist" on the applet IDE to prompt the developer of the applet to scan As a result, the corresponding code defects were improved.

In the mini program code scanning method of this embodiment, the code scanning plug-in sends the mini program code to the server for scanning, so that the code writing defects in the mini program code can be detected in time, and the defects can be displayed to the user for improvement in time , Thereby avoiding various types of small program application problems such as white screen and flashback caused by small program code defects, and improving the quality of the small program code.

In addition, because the applet code is scanned on the server side, when new scanning rules appear, the scanning rules can be updated on the server side in time, so that the server can scan according to the latest scanning rules and get the latest Scan results.

The server of the embodiment of the present specification can scan not only small programs, but also other types of program codes for defects, for example, it can parse and scan program codes written in traditional JS (Javascript) language.

Fig. 2 is a schematic structural diagram of a small program code scanning device provided by one or more embodiments of this specification, and the device can be applied to a code scanning server. As shown in FIG. 2, the device may include: a request receiving module 21, a code analysis module 22, and a scanning processing module 23.

The request receiving module 21 is configured to receive a code scan request sent by the client, and the code scan request carries the small program code to be scanned.

The code analysis module 22 is used to parse the applet code to obtain each code module.

The scanning processing module 23 is configured to separately detect the respective code modules based on scanning rules to obtain the scanning result of the small program code.

In an example, the request receiving module 21 is specifically configured to: receive the code scan request sent by the client, the code scan request carrying the encrypted applet code; and decrypt the encrypted applet code to obtain The code of the small program to be scanned.

In an example, the code analysis module 22 is specifically used to: according to the applet code specification, disassemble each code module level by level on the applet code to obtain each code module of the tree-like hierarchical structure.

FIG. 3 is a schematic structural diagram of a small program code scanning device provided by one or more embodiments of this specification. The device can be applied to a client of code scanning, for example, it can be specifically applied to a scanning plug-in of the client. As shown in FIG. 3, the device may include: a code acquisition module 31, a request sending module 32, and a result receiving module 33.

The code obtaining module 31 is used to obtain the small program code corresponding to the currently edited file;

The request sending module 32 is configured to send a code scan request to the server, where the code scan request carries the applet code;

The result receiving module 33 is configured to receive the scan result of the applet code returned by the server.

The devices or modules described in the above embodiments may be implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. The specific form of the computer can be a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email receiving and sending device, and a game control A console, a tablet computer, a wearable device, or a combination of any of these devices.

For the convenience of description, when describing the above device, the functions are divided into various modules and described separately. Of course, when implementing one or more embodiments of this specification, the functions of each module can be implemented in the same one or more software and/or hardware.

The execution sequence of each step in the process shown in the above cash recognition method is not limited to the sequence in the flowchart. In addition, the description of each step can be implemented in the form of software, hardware, or a combination thereof. For example, a person skilled in the art can implement it in the form of software code, which can be a computer executable that can implement the logic function corresponding to the step. instruction. When it is implemented in software, the executable instructions can be stored in the memory and executed by the processor in the device.

For example, corresponding to the above method, one or more embodiments of this specification also provide a small program code scanning device. The device may include a processor, a memory, and computer instructions stored in the memory and running on the processor. The processor executes the instructions to implement the small program code scanning method described in any embodiment of this specification.

Those skilled in the art should understand that one or more embodiments of this specification can be provided as a method, a system, or a computer program product. Therefore, one or more embodiments of this specification may adopt the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, one or more embodiments of this specification may adopt computer programs implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program codes. The form of the product.

These computer program instructions can also be stored in a computer-readable memory that can guide a computer or other programmable data processing equipment to work in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture including the instruction device. The device implements the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

These computer program instructions can also be loaded on a computer or other programmable data processing equipment, so that a series of operation steps are executed on the computer or other programmable equipment to produce computer-implemented processing, so as to execute on the computer or other programmable equipment. The instructions provide steps for implementing the functions specified in one process or multiple processes in the flowchart and/or one block or multiple blocks in the block diagram.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or also include elements inherent to such processes, methods, commodities, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, commodity, or equipment that includes the element.

One or more embodiments of this specification may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. One or more embodiments of this specification can also be practiced in distributed computing environments. In these distributed computing environments, tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the difference from other embodiments. In particular, as for the server device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The foregoing describes specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims can be performed in a different order than in the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown in order to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

The foregoing descriptions are only preferred embodiments of one or more embodiments of this specification, and are not intended to limit this specification. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification, All should be included in the protection scope of this manual.

Claims

A method for scanning small program codes, the method comprising:

Receiving a code scan request sent by the client, where the code scan request carries a small program code to be scanned;

Parse the applet code to obtain each code module;

The respective code modules are respectively detected based on the scanning rule, and the scanning result of the small program code is obtained.
The method according to claim 1, wherein said receiving a code scanning request sent by a client, said code scanning request carrying a small program code to be scanned, comprises:

Receiving the code scanning request sent by the client, where the code scanning request carries the encrypted applet code;

Decrypt the encrypted small program code to obtain the to-be-scanned small program code.
The method according to claim 1, wherein the parsing the code of the applet to obtain each code module comprises:

According to the code specification of the small program, the code modules of the small program code are disassembled hierarchically to obtain each code module of the tree-like hierarchy.
The method according to claim 1, wherein the respective code modules are respectively detected based on scanning rules, and after the scanning result of the applet code is obtained, the method further comprises:

The scan result is sent to the client, so that the client displays the scan result.
A method for scanning small program codes, the method comprising:

Obtain the small program code corresponding to the currently edited file;

Sending a code scan request to the server, where the code scan request carries the applet code;

Receiving the scan result of the applet code returned by the server.
A small program code scanning device, the device includes:

The request receiving module is configured to receive a code scan request sent by the client, where the code scan request carries the small program code to be scanned;

The code analysis module is used to parse the applet code to obtain each code module;

The scanning processing module is used to detect the respective code modules based on the scanning rules to obtain the scanning result of the small program code.
The device according to claim 6,

The request receiving module is specifically configured to: receive the code scanning request sent by the client, the code scanning request carrying the encrypted small program code; and decrypt the encrypted small program code to obtain the to-be-scanned code The small program code.
The device according to claim 6,

The code analysis module is specifically used to: according to the applet code specification, disassemble each code module of the applet code level by level to obtain each code module of the tree-like hierarchical structure.
A small program code scanning device, the device includes:

The code acquisition module is used to acquire the small program code corresponding to the currently edited file;

The request sending module is configured to send a code scan request to the server, where the code scan request carries the small program code;

The result receiving module is used to receive the scanning result of the applet code returned by the server.
A small program code scanning device, the device comprising a memory, a processor, and computer instructions stored in the memory and running on the processor, and the processor implements any one of claims 1 to 4 when executing the instructions , Or implement the method described in claim 5.