Asp.Net MVC 2 JsonRequestBehavior.AllowGet

If you've been trying out Asp.Net MVC 2 you might come across this error: This request has been blocked because sensitive information could be disclosed to third party web sites when this is used in a GET request. But it worked in MVC 1.0! There is a security vulnerability using JQuery AJAX GET requests (JSON Hijacking) and in MVC 2 get requests are blocked by default. You can get around the problem and leave the security problem by adding JsonRequestBehavior.AllowGet when you return the JSON result: