Jon Ferraiolo

This article provides an introduction to some of the security threats associated with AJAX technologies, particularly when used within mashup scenarios, and then offers a list of recommended best practices. Understanding the Same-Origin Policy One of the foundations of Web security is the "same-origin" policy, which is widely implemented by Web browsers, including the most popular ones (e.g., Internet Explorer, Firefox, Safari, and Opera). Browsers implement the same-origin policy as a protection mechanism in order to isolate Web applications coming from different domains, under the assumption that different domains represent different originators. As a result, if applications in multiple windows or frames are downloaded from different servers, they will not be able to a... (more)

OpenAjax Alliance: A Remarkable First Year and Plans for the Future!

The OpenAjax Alliance is a consortium of companies that are active in the AJAX industry. It was founded on May 15, 2006, concluded a governing Members Agreement in October 2006, and now has more than 80 member organizations, including industry giants such as Adobe, BEA, Cisco, ESRI, Fidelity, Google, IBM, Microsoft, Mozilla, Oracle, SAP, and Sun. The alliance's home page at www.openajax.... (more)

The OpenAjax Technology Vision: Accelerating Customer Success with AJAX

OpenAjax ­ Fulfilling AJAX's Promise One would think that an industry would slow down as it matures, but the Web has proven to be just the opposite. Innovations are happening at breakneck speed. Companies have to move faster than ever to keep up and survive. AJAX is clearly a case in point. The term "AJAX" was first mentioned publicly in February 2005 by Jesse James Garrett. But roughly 18 ... (more)

When Does AJAX Make Business Sense?

Hard-nosed executives recognize that there are costs associated with any benefit. To convince today's upper-level decision makers to approve strategic investments, they need to hear more than phrases like "essential to the business," "the results are too unpredictable," and "yields intangible benefits." In the world of Web development, the move from HTML to AJAX-powered HTML can often be... (more)

OpenAjax Alliance Call-to-Action to AJAX Developers for Browser Wishlist

The OpenAjax Alliance is developing an AJAX industry wishlist for future browsers, using a dedicated wiki for this initiative. The main purpose of the initiative is to inform the browser vendors about what future features are most important to the AJAX community and why. So far, the alliance has interviewed roughly a dozen industry leaders, including representatives from the ASP.NET AJAX... (more)