Why webservice responce data appendec with responseText.d..?

Hi,

If you aren't familiar with the ".d" I'm referring to, it is simply a security feature that Microsoft added in ASP.NET 3.5's version of ASP.NET AJAX. By encapsulating the JSON response within a parent object, the framework helps protect against a particularly nasty XSS vulnerability.

Before ASP.NET 3.5, "ScriptServices" and page methods returned their data at the top level of the JSON response, like this:

2.0 JSON Response in Firebug

In ASP.NET 3.5 and later, the same server-side code returns this:

3.5 JSON Response in Firebug

For more information about the change and why the change is a good one, be sure to see my earlier post: A breaking change between versions of ASP.NET AJAX.

For more information see this link :

Never worry about ASP.NET AJAX's .d again

http://encosia.com/never-worry-about-asp-net-ajaxs-d-again/

1 Reply

Know the answer? Post it — somebody with the same question will find it here.

Manoj Bhoir11y ago
Hi,
If you aren't familiar with the ".d" I'm referring to, it is simply a security feature that Microsoft added in ASP.NET 3.5's version of ASP.NET AJAX. By encapsulating the JSON response within a parent object, the framework helps protect against a particularly nasty XSS vulnerability.

Before ASP.NET 3.5, "ScriptServices" and page methods returned their data at the top level of the JSON response, like this:

In ASP.NET 3.5 and later, the same server-side code returns this:

For more information about the change and why the change is a good one, be sure to see my earlier post: A breaking change between versions of ASP.NET AJAX.
For more information see this link :
Never worry about ASP.NET AJAX's .d again
http://encosia.com/never-worry-about-asp-net-ajaxs-d-again/