Firewall Blocks Javascript

[rcw1983]

I am just getting into more and more web development. I have been
developing pages using ASP.NET and recently started to add in some
basic javascript funcitons. In the last page I built I had simple
javascript to add the value of two textboxes and put the result in a
third. I also did some validation in javascript. I ran into a few
cases where a user's firewall was blocking the javascript. Are there
any ways of preventing this? Are there things I can do to minimize
these types of situations?

This raises concerns for me because I'm looking to build some custom
AJAX functionality to avoid the overhead of the .NET UpdatePanel, but
if my javascript might get blocked I might have to reconsider.

[rcw1983]

Re: Firewall Blocks Javascript


Thanks for the reply. Your response has brought up another question
on my mind.

If the user can modify the request/response, how do I secure any
custom AJAX calls?

[Gregor Kofler]

Re: Firewall Blocks Javascript

rcw1983 meinte:

Thanks for the reply. Your response has brought up another question
on my mind.
>
If the user can modify the request/response, how do I secure any
custom AJAX calls?

The same way you validate any "normal" post or get requests. Any XHR
*is* a post or get request. And if the customer modifies the response:
Who cares?

Gregor


--
http://photo.gregorkofler.at ::: Landschafts- und Reisefotografie
http://web.gregorkofler.com ::: meine JS-Spielwiese
http://www.image2d.com ::: Bildagentur für den alpinen Raum