Comment Re:Security not a consideration? (Score 1) 187
My user name was created way before i got all that smart :)
Anyway, to answer your question, if you're using XML as your data transport format (just like Rico and xajax frameworks do), then you're safe from JavaScript Hijacking: XML is not valid JavaScript, so it will not be correctly eval()-ed.
Anyway, to answer your question, if you're using XML as your data transport format (just like Rico and xajax frameworks do), then you're safe from JavaScript Hijacking: XML is not valid JavaScript, so it will not be correctly eval()-ed.