Ajax Security.pdf

“ Ajax Security is a remarkably rigorous and thorough examination

of an underexplored subject. Every Ajax engineer needs to have

the knowledge contained in this book—or be able to explain why

they don’t.”

Jesse James Garrett

“Finally, a book that collects and presents the various Ajax security

concerns in an understandable format! So many people have

hopped onto the Ajax bandwagon without considering the secu-

rity ramifications; now those people need to read this book and

revisit their applications to address the various security short-

comings pointed out by the authors.”

Jeff Forristal

“If you are writing or reviewing Ajax code, you need this book.

Billy and Bryan have done a stellar job in a nascent area of our

field, and deserve success. Go buy this book. I can’t wait for it to

come out.”

Andrew van der Stock, Executive Director, OWASP

“Web technologies like Ajax are creating new networked business

structures that remove the sources of friction in the new econ-

omy. Regrettably, hackers work to compromise this evolution by

capitalizing on the weaknesses in this technology and those who

develop it. Until now, few books told the whole Ajax security

story, educating those using or planning to use this technology.

This one does.”

Managing Partner, Trellum Technologies

This page intentionally left blank

Ajax Security

This page intentionally left blank