AJAX是否有任何特殊的安全问题？

Question

I know all about SQL injections, and peeking into javascript files that a website uses, and also that GET requests contain all of the information in a URL.

Is there any security concern that is special to AJAX and only pertains to using AJAX?

For example, sending post requests via AJAX seems completely safe to me. Barring SQL injections, I can't think of one thing that could go wrong... is this the correct case?

Also, are "requests" of any kind that a user's browser sends or any information it receives available to be viewed by a third party who should not be viewing? And can that happen to AJAX post requests ('post' requests specifically; not 'get')?

Answer 1

它就像任何其他形式的数据输入：验证您的值，检查引用者，验证会话，使用SSL。