MSDN Library

Web Development

ASP.NET

ASP.NET MVC 2

ASP.NET MVC Reference

System.Web.Mvc

AcceptVerbsAttribute Class

ActionDescriptor Class

ActionExecutedContext Class

ActionExecutingContext Class

ActionFilterAttribute Class

ActionMethodSelectorAttribute Class

ActionNameAttribute Class

ActionNameSelectorAttribute Class

ActionResult Class

ActionSelector Delegate

AjaxHelper Class

AjaxHelper(TModel) Class

AjaxRequestExtensions Class

AreaRegistration Class

AreaRegistrationContext Class

AssociatedMetadataProvider Class

AssociatedValidatorProvider Class

AsyncController Class

AsyncTimeoutAttribute Class

AuthorizationContext Class

AuthorizeAttribute Class

BindAttribute Class

ByteArrayModelBinder Class

ChildActionOnlyAttribute Class

ClientDataTypeModelValidatorProvider Class

ContentResult Class

Controller Class

ControllerActionInvoker Class

ControllerBase Class

ControllerBuilder Class

ControllerContext Class

ControllerDescriptor Class

CustomModelBinderAttribute Class

DataAnnotationsModelMetadata Class

DataAnnotationsModelMetadataProvider Class

DataAnnotationsModelValidationFactory Delegate

DataAnnotationsModelValidator Class

DataAnnotationsModelValidator(TAttribute) Class

DataAnnotationsModelValidatorProvider Class

DataErrorInfoModelValidatorProvider Class

DefaultControllerFactory Class

DefaultModelBinder Class

DefaultViewLocationCache Class

DictionaryValueProvider(TValue) Class

EmptyModelMetadataProvider Class

EmptyModelValidatorProvider Class

EmptyResult Class

ExceptionContext Class

ExpressionHelper Class

FieldValidationMetadata Class

FileContentResult Class

FilePathResult Class

FileResult Class

FileStreamResult Class

FilterAttribute Class

FilterInfo Class

FormCollection Class

FormContext Class

FormMethod Enumeration

FormValueProvider Class

FormValueProviderFactory Class

HandleErrorAttribute Class

HandleErrorInfo Class

HiddenInputAttribute Class

HtmlHelper Class

HtmlHelper(TModel) Class

HttpAntiForgeryException Class

HttpDeleteAttribute Class

HttpFileCollectionValueProvider Class

HttpFileCollectionValueProviderFactory Class

HttpGetAttribute Class

HttpPostAttribute Class

HttpPostedFileBaseModelBinder Class

HttpPutAttribute Class

HttpRequestExtensions Class

HttpUnauthorizedResult Class

HttpVerbs Enumeration

IActionFilter Interface

IActionInvoker Interface

IAuthorizationFilter Interface

IController Interface

IControllerFactory Interface

IExceptionFilter Interface

IModelBinder Interface

InputType Enumeration

IResultFilter Interface

IRouteWithArea Interface

ITempDataProvider Interface

IValueProvider Interface

IView Interface

IViewDataContainer Interface

IViewEngine Interface

IViewLocationCache Interface

JavaScriptResult Class

JsonRequestBehavior Enumeration

JsonResult Class

LinqBinaryModelBinder Class

ModelBinderAttribute Class

ModelBinderDictionary Class

ModelBinders Class

ModelBindingContext Class

ModelClientValidationRangeRule Class

ModelClientValidationRegexRule Class

ModelClientValidationRequiredRule Class

ModelClientValidationRule Class

ModelClientValidationStringLengthRule Class

ModelError Class

ModelErrorCollection Class

ModelMetadata Class

ModelMetadataProvider Class

ModelMetadataProviders Class

ModelState Class

ModelStateDictionary Class

ModelValidationResult Class

ModelValidator Class

ModelValidatorProvider Class

ModelValidatorProviderCollection Class

ModelValidatorProviders Class

MultiSelectList Class

MvcHandler Class

MvcHtmlString Class

MvcHttpHandler Class

MvcRouteHandler Class

NameValueCollectionExtensions Class

NameValueCollectionValueProvider Class

NoAsyncTimeoutAttribute Class

NonActionAttribute Class

OutputCacheAttribute Class

ParameterBindingInfo Class

ParameterDescriptor Class

PartialViewResult Class

QueryStringValueProvider Class

QueryStringValueProviderFactory Class

RangeAttributeAdapter Class

RedirectResult Class

RedirectToRouteResult Class

ReflectedActionDescriptor Class

ReflectedControllerDescriptor Class

ReflectedParameterDescriptor Class

RegularExpressionAttributeAdapter Class

RequiredAttributeAdapter Class

RequireHttpsAttribute Class

ResultExecutedContext Class

ResultExecutingContext Class

RouteCollectionExtensions Class

RouteDataValueProvider Class

RouteDataValueProviderFactory Class

SelectList Class

SelectListItem Class

SessionStateTempDataProvider Class

StringLengthAttributeAdapter Class

TagBuilder Class

TagRenderMode Enumeration

TempDataDictionary Class

TemplateInfo Class

UrlHelper Class

UrlParameter Class

ValidateAntiForgeryTokenAttribute Class

ValidateInputAttribute Class

ValueProviderCollection Class

ValueProviderDictionary Class

ValueProviderFactories Class

ValueProviderFactory Class

ValueProviderFactoryCollection Class

ValueProviderResult Class

ViewContext Class

ViewDataDictionary Class

ViewDataDictionary(TModel) Class

ViewDataInfo Class

ViewEngineCollection Class

ViewEngineResult Class

ViewEngines Class

ViewMasterPage Class

ViewMasterPage(TModel) Class

ViewPage Class

ViewPage(TModel) Class

ViewResult Class

ViewResultBase Class

ViewTemplateUserControl Class

ViewTemplateUserControl(TModel) Class

ViewType Class

ViewUserControl Class

ViewUserControl(TModel) Class

VirtualPathProviderViewEngine Class

WebFormView Class

WebFormViewEngine Class

Community Content

Broken link...
The ;link ;to ;Phil ;Haack's ;bl...

More...

1 out of 4 rated this helpful - Rate this topic

JsonRequestBehavior Enumeration

.NET Framework 4

Specifies whether HTTP GET requests from the client are allowed.

Namespace: System.Web.Mvc
Assembly: System.Web.Mvc (in System.Web.Mvc.dll)

Copy

public enum JsonRequestBehavior

	Member name	Description
	AllowGet	HTTP GET requests from the client are allowed.
	DenyGet	HTTP GET requests from the client are not allowed.

The default value is DenyGet. Allowing GET requests can result in a user visiting one Web site while still logged into another Web site. This can create an information-disclosure security vulnerability. For information about this vulnerability, see the entry JSON Hijacking on Phil Haack's blog.

Reference

System.Web.Mvc Namespace

Did you find this helpful? Yes No

Not accurate

Not enough depth

Need more code examples

(1500 characters remaining)

Community Content Add

Annotations

FAQ

Broken link

The link to Phil Haack's blog is broken. Here is the correct (at the time I'm writting this) one: http://haacked.com/archive/2009/06/25/json-hijacking.aspx

History

4/26/2010
Bounav

4/26/2010
Bounav

© 2012 Microsoft. All rights reserved.

Terms of Use | Trademarks | Privacy Statement | Site Feedback Site Feedback

Site Feedback

x

Tell us about your experience...

Did the page load quickly?

Yes No

Do you like the page design?

Yes No

Tell us more