I have some experience developing on server-side web applications. Back in my old job at AstraZeneca I had the task of giving security maintenance and updates to a discounts application, this was mainly done through a Node-JS middleware that communicated with the real back-end technology which was mostly implemented in the framework Spring for Java.
I was quite impressed by how different the paradigm is as it was my first time messing around with a "scripting" language. As the lecture states, the Node/Express framework is heavily focused on handling outer requests, perhaps doing some processing to it and forwarding it. And I feel like implementing a lighter language with these specifications is more compĺex than developing a full scale console based language. One of my tasks was also implementing cross-framing with another of AZ's web applications. There is so much to consider in the security side for this type of languages. Cross-site scripting , click-jacking, header validations, watching for HTML injections among many others.
I think it was a good decision to provide a kernel to the students as it seems that dealing with HTTP requests at low level seems difficult enough that I can't imagine how do you even setup and test the most basic functionalities for this. It would be necessary to have some advances knowledge of the required web protocols I believe. Perhaps a project which focuses specifically on building a request framework for a secondary language would be as interesting and could have an insight into this obscure (for me) knowledge.
As tough of a task as it is, it sounds like something quite interesting and worth having a look at, specially at this point of time where a lot of companies are basing their desktop client applications on top of a web application, there are even some frameworks for this such as Microsoft's Electron which I believe is having a modest success. As much as I despise looking at some
<a><{user.song}></a> bug on my Spotify desktop client, it seems that the experience that this project can potentially provide is proving to be more and more relevant in the IT industry.