The hype surrounding AJAX and security risks is hard to miss. Supposedly,
this hot new technology responsible for compelling web-based applications
like Gmail and Google Maps harbors a dark secret that opens the door to
malicious hackers. Not exactly true. Even the most experienced Web
application developers and security experts have a difficult time cutting
through the buzzword banter to find the facts. And, the fact is most websites
are insecure, but AJAX is not the culprit. Although AJAX does not make
websites any less secure, it’s important to understand what does.
AJAX is a combination of web browser technologies that allows web page
content to be updated “on-the-fly” without the user moving from page to
page. In the background of an AJAX-enabled web page, data (typ... (more)