Json allowget error

后端 未结 4 532
难免孤独
难免孤独 2021-02-03 17:34

This error comes up in our MVC app randomly. Sometimes doing the same exact thing it won\'t sometimes, it will. Does anyone know if this has to do with anything that could be a

4条回答
  •  没有蜡笔的小新
    2021-02-03 17:54

    You should read http://haacked.com/archive/2009/06/24/json-hijacking.aspx/ before bypassing these security controls.

    If you only expose your JSON data in response to a Http POST, then you are not vulnerable to this attack.

    You can simply annotate your JSON action with [HttpPost] and in the client do something like

    $.post('/blag/JSON', function (data) {
           //do something with my json data object here
    
    });
    

提交回复
热议问题