Ajax application development: eliminating common security problems

Thread Rating:

0 Vote(s) - 0 Average
1
2
3
4
5

Threaded Mode | Linear Mode

Ajax application development: eliminating common security problems

04-06-2006, 08:43 AM,

Post: #1

Kristijntje Offline

Super Moderator

Posts: 1,200
Likes Given: 0
Likes Received: 0 in 0 posts
Joined: Oct 2005
Reputation: 0

Ajax application development: eliminating common security problems

Article explores ways to minimize security problems when developing Ajax applications:

Quote: AJAX: Is your application secure enough?...

The Question

Some web-enabled applications, such as for email, do have pretty destructive functionality that could possibly be abused. The question is will the average AJAX-enabled web-application be able to tell the difference between a real and a faked XmlHttpRequest?

Do you know if your recently developed AJAX-enabled or enhanced application is able to do this? And if so does it do this adequately?

Do you even check referrers or some trivial token such as the user-agent? Chances are you do not even know. Chances are that other people, by now, do....

full article: http://www.darknet.org.uk/2006/04/ajax-i...re-enough/

related topic:
Web 2.0 Star Ajax Could Open Door to Security Problems: The Ajax Malware Threat
http://community.tuliptools.com/index.ph...268.0.html

Al draagt een aap een gouden ring, het is en blijft een lelijk ding

« Next Oldest | Next Newest »

Possibly Related Threads…
Thread		Author	Replies	Views	Last Post
	AJAX	Monalisa	0	2,112	01-27-2009, 05:16 AM Last Post: Monalisa
	Four Dozen Plus AJAX Tutorials	mandy	0	2,202	10-18-2008, 08:47 AM Last Post: mandy
	Tools and Techniques for Managing the Performance of Ajax Applications	mandy	0	2,496	05-04-2008, 11:03 AM Last Post: mandy
	Ajax 101	mandy	0	2,337	07-25-2007, 10:22 AM Last Post: mandy
	Review of 5 AJAX Frameworks: Dojo. Prototype, Google Web Toolkit, and more	mandy	0	2,606	05-03-2007, 11:30 AM Last Post: mandy
	Web 2.0: almost all AJAX toolkits found ti be vulnerable to JavaScript Hijacking	Kristijntje	0	2,359	04-02-2007, 03:40 PM Last Post: Kristijntje
	How to add AJAX functionality to your website in three easy steps	Kristijntje	0	2,485	03-19-2007, 12:16 PM Last Post: Kristijntje
	Ecommerce: providing a faster and easier shopping experience by using AJAX	mandy	0	3,580	02-05-2007, 12:10 PM Last Post: mandy
	AJAX and Prototype Hijacking: a fundamental design flaw in Javascript	Kristijntje	0	2,753	01-07-2007, 03:52 PM Last Post: Kristijntje
	Introduction to Developing Web Applications with Ajax	mandy	0	2,592	12-17-2006, 11:37 AM Last Post: mandy

Forum Jump:

Users browsing this thread: 2 Guest(s)