AJAX and security

[M. Gordon]

Hi,

I've started using AJAX in my web applications but I'm concerned about any security risks that I should be taking into account. Does this technology make web applications more vulnerable?

Maria

[Eric Pascarello]

You should have the same security concerns with the traditional web page model. Look for SQl injectsions for the database and JavaScript injections with text that is going to be displayed on the screen.

Eric

[Nate Schutta]

Eric hit this one right on the head - anything you can do security wise with "old fashioned" web pages can be done with Ajax so the same precautions apply. Ben and Dion hit on this in a recent Audible Ajax. Here's a link to Odeo: Audible Ajax.