Asp.Net MVC 2 JsonRequestBehavior.AllowGet

home
asp.net
view story

1 Kicks

Asp.Net MVC 2 JsonRequestBehavior.AllowGet(ifunky.net)

submitted by iDan(80) 2 years, 2 months ago

If you've been trying out Asp.Net MVC 2 you might come across this error: This request has been blocked because sensitive information could be disclosed to third party web sites when this is used in a GET request. But it worked in MVC 1.0! There is a security vulnerability using JQuery AJAX GET requests (JSON Hijacking) and in MVC 2 get requests are blocked by default. You can get around the problem and leave the security problem by adding JsonRequestBehavior.AllowGet when you return the JSON result:

add a comment |category: ASP.NET |Views: 84
Tweet