APPLICATION SECURITY BOOK EXCERPTS
Ajax in Action -- Chapter 7, Security and Ajax
David Crane, Eric Pascarello and Darren James
08.02.2006
Rating: -4.50- (out of 5)
As a registered member of SearchAppSecurity.com, you're entitled to a complimentary copy of Chapter 7 of Ajax in Action written by David Crane, Eric Pascarello and Darren James and published by Manning Publications. "Security and Ajax" looks at the issue of security in Ajax from a number of angles. Ajax is a Web technology and many of the issues that it faces are no different from any other Web app.
This chapter covers the basic ground, concentrating on Ajax-specific issues such as securely importing generated JavaScript from the server, and protecting your Web service entry points from unwanted direct manipulation. Security can be a showstopper for serious applications, and "Security and Ajax" gives the basic steps needed to keep it under control.
[IMAGE]
Book description:
Web users are getting tired of the traditional Web experience. They get frustrated losing their scroll position; they get annoyed waiting fo
To continue reading for free, register below or login
To read more you must become a member of SearchSoftwareQuality.com
 |
 |
| |
RELATED CONTENT
 |
Security Methods |
|
Fuzzing for Software Security Testing and Quality Assurance: Chapter 3, Testing for Quality
|
|
Software Security Engineering: A Guide for Project Managers -- Chapter 3, Requirements Engineering for Secure Software
|
|
Google Hacking for Penetration Testers, Volume 2: Chapter 6, Locating Exploits and Finding Targets
|
|
Ajax Security -- Chapter 6, Transparency in Ajax Applications
|
|
Fuzzing: Brute Force Vulnerability Discovery -- Chapter 12, Fuzzing Frameworks
|
|
Static Analysis as Part of the Code Review Process -- Chapter 3, Secure Programming with Static Analysis
|
|
Security Metrics: Replacing Fear, Uncertainty, and Doubt -- Chapter 3, Application Security Metrics
|
|
Forms Authentication -- Chapter 5, Professional ASP.NET 2.0 Security, Membership, and Role Management
|
|
Securing JavaServer Faces Applications -- Chapter 15, JavaServer Faces: The Complete Reference
|
|
Hacking for Dummies -- Chapter 16, Web applications
|
|
r refresh; they struggle to reorient themselves on every new page. With asynchronous JavaScript and XML, known as "Ajax," you can give them a better experience. Once users have experienced an Ajax interface, they hate to go back. Ajax is new way of thinking that can result in a flowing and intuitive interaction with the user.
Ajax in Action helps you implement that thinking--it explains how to distribute the application between the client and the server while retaining the integrity of the system. You will learn how to ensure your app is flexible and maintainable, and how good, structured design can help avoid problems like browser incompatibilities. Along the way it helps you unlearn many old coding habits. Above all, it opens your mind to the many advantages gained by placing much of the processing in the browser. If you are a Web developer who has prior experience with Web technologies, this book is for you.
>> Click here to download Chapter 7: Security and Ajax (PDF)
>> Buy the book
|
|
|
|
|
|
