Simon Willison’s Weblog

When Ajax Attacks! Web application security fundamentals. Slides and (other people’s) notes from my presentation at @media Ajax on Tuesday.

Posted 17th September 2008 at 11:18 pm

Recent articles

Trying out the new Gemini 2.5 model family - 17th June 2025
The lethal trifecta for AI agents: private data, untrusted content, and external communication - 16th June 2025
An Introduction to Google’s Approach to AI Agent Security - 15th June 2025

ajax 61 atmediaajax 2 atmediaajax08 1 csrf 48 javascript 713 security 526 speaking 117 my-talks 88 xss 60 recovered 213

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe