Secure Mashups

Secure Mashups Kris Zyp ,[object Object]

Interconnectedness ,[object Object]

Overview ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

Techniques of mashups ,[object Object]

Trust between mashup participants ,[object Object],[object Object],[object Object]

Server Side Mashups ,[object Object],[object Object]

Client Side Mashups ,[object Object],[object Object],[object Object],[object Object],[object Object]

Providing services for mashups ,[object Object],[object Object]

Services protecting resources ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

JSON Hijacking ,[object Object],[object Object],[object Object],[object Object],[object Object]

Client Side Transports: JSONP ,[object Object],[object Object]

Client Side Transports: Fragment Identifier Messaging ,[object Object],[object Object],Inner Frame http://service.com /#message_for_the_outer_frame

Client Side Transport: Subspace ,[object Object],[object Object],[object Object]

Client Side Transport: window.name ,[object Object],[object Object],[object Object],[object Object]

Client Side Transport: postMessage ,[object Object],[object Object],[object Object],[object Object],[object Object]

Client Side Transport: Native XHR with W3C CS-AC ,[object Object],[object Object],[object Object],[object Object]

Third party widgets ,[object Object],[object Object],[object Object]

ADsafe ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

ADsafe ,[object Object],[object Object]

Caja ,[object Object],[object Object],[object Object]

Dojo Secure ,[object Object],[object Object],[object Object],[object Object]

Dojo Secure ,[object Object],[object Object],[object Object]

Using dojox.secure ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object]

dojox.secure ,[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],Accompanied by Demo

Properly differentiate authorization and authentication

Avoid insecure loading mechanisms and cookie only based authorization

dojox.secure to create client-side mashups ,[object Object],[object Object]

Recomendados