Dan Morrill just published a very good article about Security and GWT
Applications. The first part of the article describes the major classes of
attacks against JavaScript that are applicable to any AJAX framework. The
second portion describes how to secure your GWT applications against them. A
must read !
Security for GWT Applications
Source :
Google Web Toolkit Blog