Get data with Ajax is unsecure?

Question

Hello guys, i am using ajax to get data in my website. Is my website not fully protected against attack or other criminal activity???

Answer 1

No! Never!……… (only back-end is protected…)

Answer 2

The question is not related to WHAT you use but HOW YOU USE IT.

Below are two links to info about best practices to avoid XSS (cross site scripting) that is a common JS vulnerability.

https://www.owasp.org/index.php/XSS_(Cross_Site_Scripting)_Prevention_Cheat_Sheet

https://www.google.com/about/appsecurity/learning/xss/

If you're even more paranoid you can look at security best practices involving database access.