ASP.NET Security Issues with jQuery – How to Ensure Safe Development

asp.netjquery

I'm new to web applications. I have developed a web application using ASP.net. After hearing about jquery and going through some examples, I changed the existing application and used jquery to do most of the ajax work. On the server side I used html handlers for db connections and data processing.

Because I'm using jquery, my concern is my script is visible to users of the application. Will this be a security issue? Am i following a right path?

Best Answer

jQuery is not a programming language. It is a JavaScript framework. Your AJAX code is not any more visible just because you switched to jQuery. No matter what, AJAX relies on JavaScript in the client, so that code is visible to whomever uses the web application. (Afterall, AJAX stands for Asynchronous Javascript And XML.)

There may certainly be security holes in jQuery. However, chances are there will be bigger holes in what you write. (This isn't meant to put you down, but you are a neophyte. Expect to make mistakes.) jQuery is used by many and programmed by a group of developers. Security is one of the things that is on everyone's minds.

I would worry more about the code I wrote with jQuery then the code that makes up jQuery. Just keep up on the updates and news about it, so that you are aware of any security issues that are identified. And, of course, learn the best practices for creating secure applications.