Dan Morrill just published a very good article about Security and GWT Applications. The first part of the article describes the major classes of attacks against JavaScript that are applicable to any AJAX framework. The second portion describes how to secure your GWT applications against them. A must read !
Security for GWT Applications
Source : Google Web Toolkit Blog