JsonRequestBehavior Enumeration

Specifies whether HTTP GET requests from the client are allowed.

Namespace:  System.Web.Mvc
Assembly:  System.Web.Mvc (in System.Web.Mvc.dll)

Syntax

'Declaration
Public Enumeration JsonRequestBehavior

public enum JsonRequestBehavior

public enum class JsonRequestBehavior

Members

Remarks

The default value is DenyGet. Allowing GET requests can result in a user visiting one Web site while still logged into another Web site. This can create an information-disclosure security vulnerability. For information about this vulnerability, see the entry JSON Hijacking on Phil Haack's blog.

See Also

Reference

System.Web.Mvc Namespace