How does Ajax affect the security of Web services?
Requires Free Membership to View
When you register, you'll receive targeted emails designed to keep you informed of the most relevant information on Agile development, application security, testing & QA, software requirements, and more.
Hannah Smalltree, Editorial Director
Ajax has made an explosion on to the Web application scene and will fundamentally change the way Web applications are made and will definitely have an overall impact on Web security. The technology promotes huge growth of the use of Web services, since Ajax has made Web services easy to consume using the browser. That means Web applications will open up their back end and treat the browser like a thick client.
Did I just say open up their back end? Yes, that is what Ajax will promote -- the ability to call directly to functions in the code via XML. It's so convenient! Think about this, if today's biggest security issue is developers not validating input just on the front end, what kind of problems will we have when developers have inputs on the front end and back end! This opens up a whole new attack surface.
More information:
* Ajax alert raises security, scalability issues
* Why do Web services impact security?
Did I just say open up their back end? Yes, that is what Ajax will promote -- the ability to call directly to functions in the code via XML. It's so convenient! Think about this, if today's biggest security issue is developers not validating input just on the front end, what kind of problems will we have when developers have inputs on the front end and back end! This opens up a whole new attack surface.
More information:
* Ajax alert raises security, scalability issues
* Why do Web services impact security?
This was first published in February 2006