I found this excellent video of Douglas Crockford (discoverer of JSON) talking about the security problems inherent in Mashups and of JavaScript as a whole.
He proposes a solution involving what he calls vats; a self contained JavaScript interpreter with limited communication to the page. The JavaScript in the page would be the only trusted [...]
Daily Archives: 2007-09-28
Mashups and JavaScript Security
2007-09-28 – 3:28 pm
