    # Máster en Programación FullStack con JavaScript y Node.js ### JS, Node.js, Frontend, Backend, Firebase, Express, Patrones, HTML5_APIs, Asincronía, Websockets, Testing ## Clase 17 ### Herramientas esenciales - [Insomnia](https://insomnia.rest/) - [Jsonviewer](http://jsonviewer.stack.hu/) - [Postman](https://chrome.google.com/webstore/detail/postman/fhbjgbiflinjbdggehcddcbncdddomop) ### Ajax avanzado: Cabeceras personalizadas y credenciales - [XMLHttpRequest.withCredentials](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/withCredentials) - [XMLHttpRequest.setRequestHeader()](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/setRequestHeader) - [Forbidden response header name](https://developer.mozilla.org/en-US/docs/Glossary/Forbidden_response_header_name) - [Forbidden header name](https://developer.mozilla.org/en-US/docs/Glossary/Forbidden_header_name) ### Ajax: FormData, una gran incentivo - [Usando Objetos FormData](https://developer.mozilla.org/es/docs/Web/Guide/Usando_Objetos_FormData) - [Uploading Files with AJAX](http://blog.teamtreehouse.com/uploading-files-ajax) ### Ajax avanzado: Otros usos - [XMLHttpRequest.responseXML](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/responseXML) - [XMLHttpRequest.responseType](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/responseType) - [XMLHttpRequest.upload](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/upload) - [XMLHttpRequest.timeout](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/timeout) - [XMLHttpRequest.getAllResponseHeaders()](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/getAllResponseHeaders) - [XMLHttpRequest.getResponseHeader()](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/getResponseHeader) - [XMLHttpRequest.overrideMimeType()](https://developer.mozilla.org/en-US/docs/Web/API/XMLHttpRequest/overrideMimeType) ### Seguridad AJAX - [Is Your Website Hackable?](https://www.acunetix.com/websitesecurity/ajax/) - [AJAX Security Cheat Sheet](https://www.owasp.org/index.php/AJAX_Security_Cheat_Sheet) - [Testing for AJAX Vulnerabilities (OWASP-AJ-001)](https://www.owasp.org/index.php/Testing_for_AJAX_Vulnerabilities_(OWASP-AJ-001)) - [Understanding Ajax vulnerabilities](https://www.ibm.com/developerworks/library/wa-vulnerabilities/index.html) ### Datos Abiertos - [Portal de datos abiertos del Ayuntamiento de Madrid](http://datos.madrid.es/portal/site/egob/) - [Iniciativa de datos abiertos del Gobierno de España](http://datos.gob.es/) - [EMT Datos Abiertos](http://opendata.emtmadrid.es/) - [European Data Portal](https://www.europeandataportal.eu/) - [Open NASA](https://open.nasa.gov/open-data/) - [Datos Abiertos de Mexico](https://datos.gob.mx/) - [The home of the U.S. Government’s open data](https://www.data.gov/)