RE: [xml-dev] Cracking AJAX? Done yet?

["Joe Fawcett" <joefawcett@hotmail.com>]

David

The XML is rarely injected into the page untransformed, there's also no 
guarantee that Ajax uses XML at all. Given the state of security of most 
services it's usually trivial to analyse the source HTML and see how to 
consume the web services directly, indeed most information from free sites 
only use free services anyway.

Joe



>From: david.lyon@preisshare.net
>To: xml-dev@lists.xml.org
>Subject: [xml-dev] Cracking AJAX? Done yet?
>Date: Tue, 07 Nov 2006 19:28:24 -0600
>
>List,
>
>Since Ajax transfers xml data down the http pipe, is anybody aware of  any 
>http filters that can be used with ajax data to siphone the  information 
>out?
>
>For example, some website sells computer parts and they are using  ajax. In 
>the old days one would just screenscrape and parse the html  to get to the 
>data. Now with ajax it's all going up-and-down the html  pipe and not being 
>seen.
>
>The data should be there, somewhere hiding in the pipe somewhere.
>
>So from the website, if we just click at the right spots, and filter  the 
>http for xml tags, then we should get the data right?
>
>Maybe it can be done at the proxy server level?
>
>Just curious? has anybody tried?
>
>
>David
>
>_______________________________________________________________________
>
>XML-DEV is a publicly archived, unmoderated list hosted by OASIS
>to support XML implementation and development. To minimize
>spam in the archives, you must subscribe before posting.
>
>[Un]Subscribe/change address: http://www.oasis-open.org/mlmanage/
>Or unsubscribe: xml-dev-unsubscribe@lists.xml.org
>subscribe: xml-dev-subscribe@lists.xml.org
>List archive: http://lists.xml.org/archives/xml-dev/
>List Guidelines: http://www.oasis-open.org/maillists/guidelines.php
>