To secure AJAX requests and responses, developers should use techniques such as setting appropriate HTTP headers, using CSRF tokens and implementing authentication mechanisms.

The requests all follow a general format, so I came up with an XML DTD to describe them. I then use XSL to translate an XML request to the exact characters the external server requires.