Although the term "Web 2.0" does not have a rigorous definition, it is
commonly used in at least two ways. First, it refers to Web applications that
encourage social interaction or collective contribution for a common good.
Second, it refers to Web programming techniques that lead to a rich and
user-friendly interface. These techniques sometimes go by the name
Asynchronous JavaScript and XML (AJAX), though many implementations don't use
XML at all. In some cases, the social and technical aspects of Web 2.0 come
together in the form of mashups: Web applications that are built by
assembling pieces from multiple independent Web applications.
This article describes a vulnerability we call JavaScript Hijacking. It's an
attack against the data transport mechanism used by many ... (more)