2

It mentioned that we should set "AllowUnsafeUpdates" to true, when the web object is not created from the SPContext.

However should I still need to set as mentioned below?

SPWeb web = SPContext.Current.Web;
web.AllowUnsafeUpdates = true;

// Perform the list/list item/web update 
web.allowUnsafeUpdates = false;
Improve this question
1
  • The suggested post does not have the answer, this is still not clear whether to use or not on the above mentioned scenario.
    – Karthikeyan
    Commented Apr 14, 2015 at 17:49

2 Answers 2

Reset to default
1

No. There is no reason to use unsafe updates in your scenario.

Improve this answer
0

Yes, you will need need to use AllowUnsafeUpdates = true, and afterwards, AllowUnsafeUpdates = false - this is to prevent your from cross-site scripting attacks.

SPWeb.AllowUnsafeUpdates : Gets/Sets a Boolean value that specifies whether to allow updates to the database as a result of a GET request or without requiring a security validation. Whenever your code modifies SharePoint data in some way or Whenever we need to update SharePoint objects like SPWeb, SPList, SPListItem, etc , without requiring a security validation, we need to set SPWeb.AllowUnsafeUpdates = true.

Source

The following stack overflow question provides some additional context on best practice, and use.

Improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.