Developing enterprise AJAX applications can raise security concerns. By applying server-centric approaches that leverage the inherent security of Java and JavaServer Faces, you can deliver AJAX-enriched presentation to the client, but restrict the client's role to just thatpresentation.