Bridges in MS Ajax

I see on the MS Ajax forum questions about where bridges are in the MS Ajax v1.0.  Well they are gone and probably will never be available for MS Ajax again. A few minutes ago the Security webcast of Microsoft on MS Ajax security ended. The guys of SPI dynamics showed us how bridges can be used to attack websites. Bridges do not check any incomming request they just pass on the request to the address where the bridge is pointing to. A good replacement for bridges are webservices because they can validate incomming requests. We as webdevelopers need to be smart when we develop websites/ webservices!


2 Responses to Bridges in MS Ajax

  1. kofmaster says:

    I use iframes .

  2. Dennis says:

    Hi Kofmaster,
    In which context are you using Iframes?

Leave a Reply

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: