Security of Java based AJAX frameworks