More information about DHTML security

[Colin Clark]

Hi Earl and Radia,

Here are some starting points about JavaScript, DHTML, Ajax, and  
mashup security:

OpenAjax Whitepaper on Ajax and Mashup Security:
http://www.openajax.org/whitepapers/Ajax%20and%20Mashup%20Security.html

IBM Developerworks Article on Shaping the Future of Secure Mashups
http://www-128.ibm.com/developerworks/library/x-securemashups/

Douglas Crockford's Proposal for Secure Mashups
http://www.json.org/module.html

A blog post by Doug Crockford about JSON Security
http://yuiblog.com/blog/2007/04/10/json-and-browser-security/

OWASP's Ajax Security Project
http://www.owasp.org/index.php/Category:OWASP_AJAX_Security_Project

And here's a link to the main source for information about JSON:

http://www.json.org/

I've posted these links and others to the Fluid Security page in our  
wiki:

http://wiki.fluidproject.org/display/fluid/Security

Hope this helps. If you find other interesting resources, please let  
us know or go ahead and post them to the wiki.

Great chatting with you today,

Colin

---
Colin Clark
Technical Lead, Fluid Project
Adaptive Technology Resource Centre, University of Toronto
http://fluidproject.org