|
JavaScript in web browsers is new security weak spot |
|
Thursday, 31 May 2007 |
|
The growing use of JavaScript in web browsers is the new security weak
spot, says Brian Chess, chief scientist and founder of US security
software specialist Fortify Software. Specifically, the use of Ajax
techniques to build Web 2.0 applications makes enterprise applications
more vulnerable. "It is really hard to see the difference between what
Ajax is supposed to do and what is an attack from hijacking
JavaScript," Chess says. "Potentially it provides a bridge between
external internet applications and internal intranet applications
behind the firewall."
|