Security and implementation issues with XMLHttpRequest Object

[Dylan Mills]

I've been enjoying the use of the XMLHttpRequest object on sites like
gmail, google suggest, flickr and backpackit recently and I've decided
to take the time to learn it.

Being that I'm new to this technology, I'm wondering if there is
anything that I need to be aware of when launching something like this
into the wild.


1. Are there any security concerns, exploits or vulnerabilities I need
to be aware of?

2. Is there a standard opensource/bsd Javascript lib that is commonly
used?

3. What kind of concerns should I keep in mind when writing the
server-side portion of the technology?


There are many sites on the net that talk about how to implement it,
but very few that I can find talk about the exploits.

Thanks,
Dylan.