JIRA/salesforce.com Plugin Defends Against Ajax Vulnerability

We recently saw the news from CBRonline discussing the potential danger of using Ajax in passing data between applications:

By exploiting JavaScript hijacking vulnerabilities, attackers would be able to, for example... gain access to any data that could be sent them via an Ajax app.

The JIRA/salesforce.com plugin, developed by Go2Group, was designed with security features to defend against this exact scenario. Go2Group's servlet ensures that requests ONLY come from the salesforce.com application over an encrypted (SSL) connection.

If you have additional questions, please contact us.