Brian Dillard of Agile Ajax has written an extensive review of Billy Hoffman's “Ajax Security”, which has received rave reviews and is quickly becoming the must-have security book for client-side development. If you've not picked this book up yet, you should do now.
The book itself, of course, documents dozens more specific security vulnerabilities - as well as best practices for protecting your application against them. I said it before, and I'll say it again: “Ajax Security” is required reading for any professional software engineer.
Get the book: Ajax Security
Ajax, Security, Ajax Security, Book, Guide, Walkthrough, Amazon, Reveiw