Fortify software have been investigating security features in the most popular Ajax frameworks, and DWR v2 comes out very well indeed. From the paper:

We analyzed 12 popular Ajax frameworks, ... We determined that among them only DWR 2.0 implements mechanisms for preventing JavaScript Hijacking.

You can download the entire paper in PDF format.

I'll be posting a detailed explanation of what DWR does to secure your data along with other options soon.

DWR 2 is currently at Release Candidate 3. We hope a final release will be ready in a couple of weeks.

Add a comment

Posted by Joe Walker on 02 April 2007 22:08:23 BST #

I'm doing a free evening seminar on DWR, Security and Accessibility in a few weeks time, on Wednesday 25th April from 18:30.

It's hosted by Skills Matter at: 1 Sekforde St, London EC1R 0BE, UK [Google Maps] [Live.com]. Entry is free but you need to register.

We've got 90 mins for the seminar, but I think there is a good chance we'll end up spending 30 mins on questions, so the talk will probably be about an hour.

And there's a plan for beer afterwards.

Responses[2]

Posted by Joe Walker on 02 April 2007 10:52:34 BST #