Not a bad article, but a lot of what is said is not specific to AJAX, and a lot of it can also be applied to Flash. I think the title is misleading too, since it's not AJAX that is introducing vulnerabilities, but programmers using it's methodologies. It would be hard to use this article as ammunition. It would perhaps have been better served if it had been written with an emphasis environment in which AJAX runs (e.g. in browsers) that does not prevent bad things from happening (whereas Flash has a sandbox that does).
So really all I took from this article that I could use - and actually it's probably the most important point - is that aside from anything else, the reason Flash is better than AJAX in this respect is because (a) a Flash application is an element contained in a browser and not tied to (in fact, fairly ignorant of) the browser itself and (b) it has a restrictive sandbox (to the point that we developers often complain). Not that I'm disagreeing with the article nescessarily. I agree that AJAX is a technology that is moving faster than it's ability to protect itself. Just adding my 2p. Jack W. Caldwell @ Zingit Technologies, Inc. wrote: > > > To all: > > For anyone being asked by clients regarding AJAX . . . some fuel for > your arsenal. > > > http://www.eweek.com/article2/0,1895,1998795,00.asp?kc=EWENTEMNL080506EOAD -- Flexcoders Mailing List FAQ: http://groups.yahoo.com/group/flexcoders/files/flexcodersFAQ.txt Search Archives: http://www.mail-archive.com/flexcoders%40yahoogroups.com Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/flexcoders/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/