Home/ Questions/Q 4322014
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-21T08:49:10+00:00

I’m reading about this ajax response that describes ways to prevent Javascript based exploits.

  • 0

I’m reading about this ajax response that describes ways to prevent Javascript based exploits.

  1. Does it make sense to apply this technique to WCF-based services that return JSON?

  2. How would this be implemented server side?

  3. How would the client consume it?

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    There’s one way WebScriptEnablingBehavior — the behavior of choice if you want a WCF service that works with ASP .NET AJAX — deals with this. By default, its response mode is “WrappedResponse”. If you watch this in action using Fiddler, it means that every response from the service — even a simple number — will wrapped in {d:} wrapper as follows:

     { "d" : return-value }

    On the other hand, WebHttpBehavior is XML out-of-the-box, but if you switch it to JSON, you can choose between WrappedResponse and BareResponse. WrappedResponse is similar to WebScriptEnablingBehavior (if I remember correctly), but BareResponse would be unsecure JSON transmitted back as a direct return value.

    • 0