WebApp Sec mailing list archives

Re: Ajax Security discussion for the OWASP Guide


From: focus () karsites net
Date: Sat, 24 Sep 2005 18:04:01 +0100 (BST)


On Fri, 23 Sep 2005, John Manko wrote:

From: John Manko <jmanko () johnmanko com>
Subject: Re: Ajax Security discussion for the OWASP Guide

Now, as a user, it would be nice to know if a page is communicating to a
remote server.  Perhaps browsers should consider allowing more detailed
javascript enable/disable features, apply different rules to different
sites, and notifications to user if certain restrictions are violated.

How do I know as an end-user that web apps I connect to are not sending information
back to the server?  How can I block or disable such interactions now?

Kind Regards - Keith Roberts




Current thread: