The Web Application Hacker’s Handbook Discovering and Exploiting Security Flaws

388

Chapter 12 

■

Attacking Other Users

70779c12.qxd:WileyRed  9/14/07  3:14 PM  Page 388

---

anti-XSS filters. The perpetrator was eventually forced to pay financial restitu-

tion to MySpace and to carry out three months of community service, without

the help of his many friends.

Figure 12-6:  Samy’s friends

AJAX

Ajax (or Asynchronous JavaScript and XML) is a technology used by some

applications to create an enhanced interactive experience for users. In most

web applications, each user action (such as clicking a link or submitting a form)

results in a new HTML page being loaded from the server. The entire browser

content disappears and is replaced with new content, even if much of this is