Technical Article: Part 4: Security and Performance Tuning of a REST and Ajax Application
By user12600920 on Jan 19, 2011
Julien Dubois's clear and useful technical article, "Security and Performance Tuning of a REST and Ajax Application," the last in a four-part series, informs developers how to secure applications against XSS (cross-site scripting) attacks and how to improve an application's server and client side performance. He shows how to secure URLs and objects, how to protect applications from hackers, how to serve static data on the client, how to improve client-side performance by using gzip and HTTP headers, and how to cache content to reduce the server-side load.
In the article, Dubois sums up the four-part series:
"In the four articles of this series, we learned how to build a Jersey-based RESTful application and how to efficiently access it with the JQuery framework. Because both frameworks rely on open and standard architectures, we saw that it was easy to make them work together, even for advanced tasks such as HTTP caching.
We also saw that such an application can provide an advanced user interface, thanks to JQuery, and it can scale very easily, thanks to the REST architecture. We also studied how such applications can be secured, even against modern XSS attacks."
Read the article in full.
In the article, Dubois sums up the four-part series:
"In the four articles of this series, we learned how to build a Jersey-based RESTful application and how to efficiently access it with the JQuery framework. Because both frameworks rely on open and standard architectures, we saw that it was easy to make them work together, even for advanced tasks such as HTTP caching.
We also saw that such an application can provide an advanced user interface, thanks to JQuery, and it can scale very easily, thanks to the REST architecture. We also studied how such applications can be secured, even against modern XSS attacks."
Read the article in full.