Thursday, September 3, 2026

Re: GWt TeaVM comparison

I looked at GraalVM as a JVM replacement, but it wouldn't work with the libraries I use (Google Datastore mainly).  I didn't realise it could also be used to compile WebAssembly.  Thanks, will check it out!

Will also check out J2CL for Web Assembly.  Publish the plugin!  :-D

On Friday, 4 September 2026 at 1:36:53 pm UTC+10 Dmitrii Tikhomirov wrote:

You can use GraalVM to compile Java to WebAssembly.

 The main limitation is multithreading; almost everything else works. 

If you need a very small WASM binary, you can use J2CL. 

I’ve actually already added WASM support to the j2cl-maven-plugin, but I still haven’t gotten around to publishing it.


On Sep 3, 2026, at 8:31 PM, Craig Mitchell <ma...@craig-mitchell.com> wrote:

Do you use it to compile to JavaScript or WebAssembly?

I'd love to compile Java to WebAssembly, but I'm too nervous about the edge cases.

On Friday, 4 September 2026 at 7:43:09 am UTC+10 Tim Macpherson wrote:
Maybe interesting for some:
.
I'm using TeaVM. Main problem is source map debugging will  usually descend into transpiled js, GWT doesn't have that problem otherwise ok it it lasts.


--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-tool...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/9335d428-ddc6-4f79-b180-07f733051f05n%40googlegroups.com.

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/87aaa65a-857e-410e-9f7a-03c9720ddbecn%40googlegroups.com.

Re: GWt TeaVM comparison

You can use GraalVM to compile Java to WebAssembly.

 The main limitation is multithreading; almost everything else works. 

If you need a very small WASM binary, you can use J2CL. 

I’ve actually already added WASM support to the j2cl-maven-plugin, but I still haven’t gotten around to publishing it.


On Sep 3, 2026, at 8:31 PM, Craig Mitchell <mail@craig-mitchell.com> wrote:

Do you use it to compile to JavaScript or WebAssembly?

I'd love to compile Java to WebAssembly, but I'm too nervous about the edge cases.

On Friday, 4 September 2026 at 7:43:09 am UTC+10 Tim Macpherson wrote:
Maybe interesting for some:
.
I'm using TeaVM. Main problem is source map debugging will  usually descend into transpiled js, GWT doesn't have that problem otherwise ok it it lasts.


--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/9335d428-ddc6-4f79-b180-07f733051f05n%40googlegroups.com.

Re: GWt TeaVM comparison

Do you use it to compile to JavaScript or WebAssembly?

I'd love to compile Java to WebAssembly, but I'm too nervous about the edge cases.

On Friday, 4 September 2026 at 7:43:09 am UTC+10 Tim Macpherson wrote:
Maybe interesting for some:
.
I'm using TeaVM. Main problem is source map debugging will  usually descend into transpiled js, GWT doesn't have that problem otherwise ok it it lasts.

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/9335d428-ddc6-4f79-b180-07f733051f05n%40googlegroups.com.

GWt TeaVM comparison

Maybe interesting for some:
.
I'm using TeaVM. Main problem is source map debugging will  usually descend into transpiled js, GWT doesn't have that problem otherwise ok it it lasts.

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/1665484800.928484.1788471699651%40mail.yahoo.com.

Monday, August 3, 2026

Does GWT support CSP Trusted Types?

Hi everyone,

We're trying to implement Trusted Types (require-trusted-types-for 'script') in a GWT 2.13 application as part of CSP hardening.

We created a default Trusted Types policy, but when Trusted Types is enforced, the application fails during startup because the GWT-generated bootstrap code triggers TrustedScript/TrustedScriptURL violations.

Has anyone successfully implemented Trusted Types with GWT? Is there any official support or recommended approach for this?

Thanks in advance!

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/1b60c2ba-afa2-4f3d-ad8c-251c403729adn%40googlegroups.com.

Tuesday, July 14, 2026

Re: Apache commons-text security issues

Hi Mirza,

this is not a production jar as Colin pointed out. 
So if you are using the owasp plugin to find these, you can safely add this library to the owasp exclusions list - or setup you plugin/project so that you only scan libraries used in your deployable product. 

rg,

Leon.

On Tuesday, 14 July 2026 at 16:45:21 UTC+2 Mirza Hadžič wrote:
Hello,

note that commons-text 1.9 used in gwt-user is having security issues,
so please upgrade this library to newer version if possible. This jar is
used by net.sourceforge.htmlunit library.

Cheers,

Mirza

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/0df8389b-9106-4603-98c0-a650b2da9f3bn%40googlegroups.com.

Re: Apache commons-text security issues

Thanks for calling this out - however, the gwt-user dependency should never be on your runtime classpath, but only used when you compile/test/debug code for your project, so the scope her is limited.

Oddly, the non-maven build of GWT doesn't appear to include commons-text, I wonder if that is an oversight of the ant build, or if the dependency can simply be excluded.

I've filed https://github.com/gwtproject/gwt/issues/10370 to track this.
On Tuesday, July 14, 2026 at 9:45:21 AM UTC-5 had...@digitech.cz wrote:
Hello,

note that commons-text 1.9 used in gwt-user is having security issues,
so please upgrade this library to newer version if possible. This jar is
used by net.sourceforge.htmlunit library.

Cheers,

Mirza

--
You received this message because you are subscribed to the Google Groups "GWT Users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-web-toolkit+unsubscribe@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/google-web-toolkit/bcfd0ff7-466c-41e0-a26e-c5b2aaa97710n%40googlegroups.com.