Was this page helpful?
Your feedback about this content is important. Let us know what you think.
Additional feedback?
1500 characters remaining
JsonRequestBehavior Enumeration
Collapse the table of content
Expand the table of content

JsonRequestBehavior Enumeration

Specifies whether HTTP GET requests from the client are allowed.

Namespace:  System.Web.Mvc
Assembly:  System.Web.Mvc (in System.Web.Mvc.dll)

public enum JsonRequestBehavior

Member nameDescription
AllowGetHTTP GET requests from the client are allowed.
DenyGetHTTP GET requests from the client are not allowed.

The default value is DenyGet. Allowing GET requests can result in a user visiting one Web site while still logged into another Web site. This can create an information-disclosure security vulnerability. For information about this vulnerability, see the entry JSON Hijacking on Phil Haack's blog.

© 2015 Microsoft