Ajax security reference

[Luke Fraser <LFraser () soltrus com>]

Can anyone point me to documentation or references specifically related to
Ajax security?  I'm particularly interested in best practices for developing
an Ajax application from a security perspective, auditing Ajax applications,
and anything specific to XMLHttpRequest security or any other aspect of Ajax
apps that wouldn't apply to a 'normal' web application.

Thanks,

Luke