AJAX In Action Security and Ajax推荐.pdfVIP

iTePub.Net-Collect Security and Ajax This chapter covers ■ The JavaScript security model ■ Remote web services ■ Protecting users’ data on the Internet ■ Protecting your Ajax data streams 246 Licensed to jonathan zheng yiyisjun@ iTePub.Net-Collect JavaScript and browser security 247 Security is an increasingly important concern for Internet services. The Web is inherently nonsecure, and adding proper security measures to an Ajax application can be a strong differentiator for a product. Clearly, if a user’s money is involved in any way, such as online shopping or providing a service that he has paid for, giving due consideration to security is essential. Security is a big topic and deserves its own book. Many of the security issues that an Ajax application faces are the same as for a classical web application. For these reasons, we’ll limit our discussion to security-related concerns that have particular implications for Ajax. First, we’ll look at the security implications of shunting executable scripts around the network, and the steps that the browser vendors have taken to make this a safe experience. We’ll also see the steps that may be taken to relax these safeguards, with the user’s compliance. Second, we’ll look at protecting a user’s data when it is submitted to the server, allowing a user to