Allow UnsafeUpdates property
I have tried to write a code in object model using C#.Net for accessing a sharepoint list items and document library, I have to set allowunsafeupdates pro开发者_JAVA技巧perty to be true.
Is it massive security problem to the whole site..
Could anyone clarify this ...
The biggest risk on setting SPSite.AllowUnsafeUpdates to true is in GET operations because it open your site to cross site scripting.
Have a look to this question for further details on using the true value within a safe pattern usage.
精彩评论