As part of the work, we took a look at 12 Ajax frameworks, including Googles GWT, Microsoft Atlas, Yahoo! UI, and a number of open source projects. A lot of the open source projects provide only client-side JavaScript libraries. In the report we point out that almost none of the frameworks protect against JavaScript Hijacking or give programmers any indication that theres anything they need to protect against themselves.
