[jQuery] Re: Detecting AJAX calls - Controlling Ajax Injection Vulnerabilities

2007-08-10 Thread Pops
I found something at http://ajax.phpmagazine.net/ajax_security I'm do more searchin here. Thanks. On Aug 9, 10:06 am, Benjamin Sterling [EMAIL PROTECTED] wrote: Pops, there was a big discussion a few months back on this subject that you may benifit from. Do a search for ajax securing;

[jQuery] Re: Detecting AJAX calls - Controlling Ajax Injection Vulnerabilities

2007-08-10 Thread Pops
Very interesting, let me check.. Yes, indeed. Wonder how I can leverage that. If it was serialized or hashed with some server specific secret key, that might be enough to sandbox this! I will have to explore that. Thanks John. -- On Aug 9, 11:05 am, John Resig [EMAIL PROTECTED] wrote:

[jQuery] Re: Detecting AJAX calls - Controlling Ajax Injection Vulnerabilities

2007-08-09 Thread Benjamin Sterling
Pops, there was a big discussion a few months back on this subject that you may benifit from. Do a search for ajax securing; there was also another big discussion that happened a few months back that I had bookmarked, but just recently deleted my bookmarks and I could not find it easily in the

[jQuery] Re: Detecting AJAX calls - Controlling Ajax Injection Vulnerabilities

2007-08-09 Thread Aaron Heimlich
On 8/9/07, John Resig [EMAIL PROTECTED] wrote: jQuery sends along an extra header: X-Requested-With: More specifically, it's: X-Requested-With: XMLHttpRequest -- Aaron Heimlich Web Developer [EMAIL PROTECTED] http://aheimlich.freepgs.com