AJAX (Asynchronous JavaScript and XML) is a popular technique for creating interactive websites, by providing a concept for data exchange between client and server asynchronously.
Questions tagged [ajax]
124 questions
1
vote
2 answers
Can F5's Big-IP ASM protect against CSRF for AJAX calls?
I know that F5's Big-Ip ASM offers protection against CSRF regarding links and forms.
However, when it comes to AJAX calls their documentation is somewhat ambiguous. I understand that they DO NOT support CSRF in the context of AJAX calls, but I…
niilzon
- 1,587
- 2
- 10
- 17
1
vote
3 answers
Reflective XSS in script codes with Content Type "text/javascript"
I have a webpage that returns raw script code with the headerContent-Type: text/javascript. However I found that there is a reflective xss in one of the parameters passed to the url which is copied into the returned javascript.
This is the…
mystupidstory
- 111
- 1
- 9
1
vote
2 answers
Javascript/Ajax Hijacking
I was wondering if below GET requests from a HTML file and a javascript file, are vulnerable to AJAX Hijacking/JavaScript Hijacking?
AJAX Hijacking: http://haacked.com/archive/2009/06/25/json-hijacking.aspx/
JavaScript Hijacking:…
p_upadhyay
- 1,121
- 3
- 14
- 31
0
votes
1 answer
May I write the CSRF token to a script
The django docs tell us that our AJAX scripts should acquire the token from the designated cookie as in get_cookie('_csrf_token'). Can I rather print it to the HTML source, so that it's available to the JS context more easily?