AJAX Security
From Computing and Software Wiki
(Difference between revisions)
(New page: AJAX Security) |
|||
Line 1: | Line 1: | ||
- | AJAX Security | + | |
+ | |||
+ | AJAX stands for Asynchronous JavaScript And XML. | ||
+ | |||
+ | AJAX is a type of programming, it is not a new language since it is based on JavaScript and HTTP requests , AJAX is a way to use existing standards. | ||
+ | |||
+ | The use of AJAX provides faster and more user friendly web applications. | ||
+ | |||
+ | |||
+ | |||
+ | == Content == | ||
+ | |||
+ | ==Advantages over Preceding Technologies== | ||
+ | |||
+ | Uses Client-side scripting which is faster for the user. | ||
+ | Only small segments of a page need to be reloaded to change content instead of full page. | ||
+ | Interacts asynchronously with the server. | ||
+ | |||
+ | [[Image:Ajax1.JPG]] | ||
+ | |||
+ | ==Security Issues== | ||
+ | |||
+ | ===Cross Site Scripting(XSS)=== | ||
+ | |||
+ | ==References== | ||
+ | [http://www.isecpartners.com/files/iSEC-Attacking_AJAX_Applications.BH2006.pdf Attack AJAX Web Applications] | ||
+ | |||
+ | [http://www.w3schools.com/Ajax/Default.Asp AJAX Tutorial] | ||
+ | |||
+ | [http://media.techtarget.com/searchSoftwareQuality/downloads/Ajax_Security_CH_6.pdf AJAX Security] | ||
+ | |||
+ | [http://www.acunetix.com/websitesecurity/ajax_applications.pdf Are AJAX Applications Vulnerable to Hack Attacks?] | ||
+ | |||
+ | [http://www.codeproject.com/KB/ajax/ajax-progamming.aspx?display=Print Testing for Security in the Age of AJAX Programming] |
Revision as of 05:02, 6 April 2009
AJAX stands for Asynchronous JavaScript And XML.
AJAX is a type of programming, it is not a new language since it is based on JavaScript and HTTP requests , AJAX is a way to use existing standards.
The use of AJAX provides faster and more user friendly web applications.
Contents |
Content
Advantages over Preceding Technologies
Uses Client-side scripting which is faster for the user. Only small segments of a page need to be reloaded to change content instead of full page. Interacts asynchronously with the server.