AJAX JSON Security Guidelines

https://securitycommunity.tcs.com/infosecsoapbox/articles/2015/06/25/ajax-json-security-guidelines