Windows Dev Center

Information
The topic you requested is included in another documentation set. For convenience, it's displayed below. Choose Switch to see the topic in its original location.

JsonRequestBehavior Enumeration

 

Specifies whether HTTP GET requests from the client are allowed.

Namespace:   System.Web.Mvc
Assembly:  System.Web.Mvc (in System.Web.Mvc.dll)

public enum JsonRequestBehavior

Member nameDescription
AllowGet

HTTP GET requests from the client are allowed.

DenyGet

HTTP GET requests from the client are not allowed.

The default value is DenyGet. Allowing GET requests can result in a user visiting one Web site while still logged into another Web site. This can create an information-disclosure security vulnerability. For information about this vulnerability, see the entry JSON Hijacking on Phil Haack's blog.

Return to top
Show:
© 2015 Microsoft