JsonRequestBehavior Enumeration
Specifies whether HTTP GET requests from the client are allowed.
Assembly: System.Web.Mvc (in System.Web.Mvc.dll)
| Member name | Description | |
|---|---|---|
| AllowGet | HTTP GET requests from the client are allowed. | |
| DenyGet | HTTP GET requests from the client are not allowed. |
The default value is DenyGet. Allowing GET requests can result in a user visiting one Web site while still logged into another Web site. This can create an information-disclosure security vulnerability. For information about this vulnerability, see the entry JSON Hijacking on Phil Haack's blog.
Show: