I am half of all the references in OWASP's guide for Ajax security testing.

Testing for AJAX Vulnerabilities - OWASP