Best Pattern for AllowUnsafeUpdates

前端 未结 6 1608
半阙折子戏
半阙折子戏 2020-12-28 08:54

So far, in my research I have seen that it is unwise to set AllowUnsafeUpdates on GET request operation to avoid cross site scripting. But, if it is required to allow this,

6条回答
  •  梦毁少年i
    2020-12-28 08:55

    Not so sure it is worth remembering the previous value of allow unsafe updates.

    I would want to wrap the call around the minimum possible amount of code, so that nested calls to it would not occur.

    Then you can just turn it to false afterwards.

提交回复
热议问题