Jeanne reviewed Ajax Security by Billy Hoffman and Bryan Sullivan and gave it a whopping 10 out of 10 horseshoes.

Anyone involved in developing/testing AJAX should read "AJAX Security." ... The writing style is quite engaging including a chapter walking you through an attack from a hacker's point of view. All the major known categories of attacks are included including resource enumeration, parameter manipulation (with SQL and XPATH injection), session hijacking, JSON hijacking, XSS, CSRF, phishing, denial of service, etc.

You can read the full review and discuss it here.