AJAX and security

[catherine]

Hi, I am playing around with AJAX and I was wondering about security
of the webservice which is used to populated dropdown boxes etc.

Obviously, like any webservice I place online security is an issue as
I do not want anyone downloading a dataset containing all my clients
names and personal information etc.

Given that I am using the Microsoft AJAX toolkit available from here

http://www.asp.net/ajax/

can someone please let me know what is the best way to secure my
webservices (rules of thumb) using this Toolkit.

Thanks
Catherine

 

[Chris Fulstow]

Hi Catherine

You need to be a bit careful about what data you expose through web
services, and like anything else validate inputs carefully.

This article explains how you can verify that a web service request
originated from a page on your site:

Asp.NET Ajax Web Service Security
http://weblogs.asp.net/rashid/archive/2007/09/20/asp-net-ajax-web-service-security.aspx

Chris

 

[catherine]

Hi Catherine

You need to be a bit careful about what data you expose through web
services, and like anything else validate inputs carefully.

This article explains how you can verify that a web service request
originated from a page on your site:

Asp.NET Ajax Web Service Securityhttp://weblogs.asp.net/rashid/archive/2007/09/20/asp-net-ajax-web-ser...

Chris








- Show quoted text -

Thanks Chris