Published on 2007-04-03 01:11:51
Dan Morrill, Google Developer Programs, posted a very good article on Security for GWT Applications. The article explores the different JavaScript vulnerabilities : Leaking Data, XSS, Forging Requests, JSON and XSRF; and how GWT developers can fight against these security issues :
One of the key goals of GWT is to let developers focus on their users' needs, instead of on JavaScript and browser quirks. However, the consequences of a security exploit can be serious, so it's important that GWT developers understand how such attacks work, and how to prevent them.
To help get the word out, I've put together an article on my experiences. Eventually we'll merge its contents into the GWT Developer Documentation, but we thought that it was important to get this out to GWT developers rather than wait for the next documentation update.
Member of the PHP Magazine Network, Copyright (C) 2005-2008 phpmagazine.net All Rights Reserved