Wednesday, June 14th, 2006
Web applications, just like any other environment, can have their share of issues. Thrown something as dynamic as Ajax into the mix and you could have some real problems if it’s left unchecked. Unfortunately, as Eric Pascarello mentions in this new blog post, there just might be one such issue with one of the larger providers out there – Yahoo.
He reinforces the security implications that could cause this (unchecked user input) . Even the “big guys” are susceptible to this sort of thing, so don’t overlook your own code.
For more information on this, check out this blog post from the Pathfinder Blog as well.
Posted by Chris Cornutt at 6:46 am