Security

Abstract

Since Ajax has only recently begun to receive mainstream recognition, it could be argued that many developers have been too overcome by the wow factor to really consider the security-related implications of building applications in this manner. It’s important to remember that, no matter what concept or language you are using to build and maintain your applications, you must always consider the security, safety, and well-being of not only your users, but also your own systems and data. Therefore, while developers new to the Ajax concept find themselves smitten with possibilities, they also must realize what is possible from a security standpoint. Is it possible to exploit certain aspects of the Ajax model? Are applications developed in JavaScript more at risk to potential attacks than those that are not? For both questions, the answer is yes. The good news is that only a few issues arise strictly because of the way Ajax functions; most security issues are the same old issues we have always faced, but they are often overlooked due to the new way that Ajax applications are handled.