Why is Json Request Behavior needed?

If I want to restrict the HttpGet requests to my action I can decorate the action with the [HttpPost] attribute

Example:

[HttpPost]
public JsonResult Foo()
{
    return Json("Secrets");
}

// Instead of:
public JsonResult Foo()
{
    return Json("Secrets", JsonRequestBehavior.AllowGet);
}

Why isn’t [HttpPost]sufficient?
Why the framework “bugs” us with the JsonRequestBehavior.AllowGet for every JsonResult that we have. If I want to deny get requests I’ll add the HttpPost attribute.

5 Answers
5

Leave a Reply

Your email address will not be published. Required fields are marked *