Bridges in MS Ajax
February 15, 2007 2 Comments
I see on the MS Ajax forum questions about where bridges are in the MS Ajax v1.0. Well they are gone and probably will never be available for MS Ajax again. A few minutes ago the Security webcast of Microsoft on MS Ajax security ended. The guys of SPI dynamics showed us how bridges can be used to attack websites. Bridges do not check any incomming request they just pass on the request to the address where the bridge is pointing to. A good replacement for bridges are webservices because they can validate incomming requests. We as webdevelopers need to be smart when we develop websites/ webservices!
I use iframes .
Hi Kofmaster,
In which context are you using Iframes?
Regards