Ajax in Action

Chapter 7. Security and Ajax

This chapter covers

• The JavaScript security model
• Remote web services
• Protecting users’ data on the Internet
• Protecting your Ajax data streams

Security is an increasingly important concern for Internet services. The Web is inherently nonsecure, and adding proper security measures to an Ajax application can be a strong differentiator for a product. Clearly, if a user’s money is involved in any way, such as online shopping or providing a service that he has paid for, giving due consideration to security is essential.

Security is a big topic and deserves its own book. Many of the security issues that an Ajax application faces are the same as for a classical web application. For these reasons, we’ll limit our discussion ...