Even so entire books could still be written on the elements of AJAX security. This chapter provides an overview of security issues to give the new practitioner a good idea of where to start.
Poorly designed AJAX applications can open holes for malicious scripts or data requests. Good server- and client-side validation is necessary to bulletproof AJAX applications.
The watchword is healthy handling. You want AJAX to exchange the information you want and need, but keep out the rest.
This section examines a few well-known examples of good and bad AJAX exploits.
