I was recently sent information that suggests that there could be security concerns when using AJAX.   My company wants me to follow up on this with the DNN Community to see if we should be concerned about a large scale project we are working on using DNN.  We are using AJAX in third party modules and also developing modules using ListX and other traditional development environments.

The security information I was sent is available in the following links.

Fortify Software Documents Pervasive and Critical Vulnerability in Web 2.0

Ajax security: How to prevent exploits in five steps

I am not a developer myself, so I rely heavily on the DNN Community for answers to concerns about security.

Thanks in advance.

Thanks for the reply Mitchel.

I'm not sure I would even know how to go about testing something like this.  Any idea where I would begin looking.  I've searched the forums here a little, but nothing so far.

Cathal, are you listening?

Thanks for your input Mitchel.

Anyone else?  Surely sombody else has an opinion on this.

Calling Cathal.