Create Secure GWT Applications
Dan Morrill, Google Developer Programs, posted a very good article on Security for GWT Applications. The article explores the different JavaScript vulnerabilities : Leaking Data, XSS, Forging Requests, JSON and XSRF; and how GWT developers can fight against these security issues :
One of the key goals of GWT is to let developers focus on their users' needs, instead of on JavaScript and browser quirks. However, the consequences of a security exploit can be serious, so it's important that GWT developers understand how such attacks work, and how to prevent them.To help get the word out, I've put together an article on my experiences. Eventually we'll merge its contents into the GWT Developer Documentation, but we thought that it was important to get this out to GWT developers rather than wait for the next documentation update.
We have to announce today the worldwide day of AJAX Security. via GWT blog
Subscribe to AJAX Magazine's feed