Conferences about new development environments, such as AJAX, typically feature sessions showing cool new things you can do with it. Inevitably, though, some sessions will focus on security issues.

$.ajax({ data: criteria, datatype: "application/json", type: "POST", url: "MI/DeleteItem/" + ItemID, cache: false, success: function (result) {... You've seen these ...

AJAX-era security requires tossing out a lot of what you thought you knew about security, starting with Same Origin Policy. Conferences about new development environments, such as AJAX, typically ...