What 'sensitive information' could be disclosed when setting JsonRequestBehavior to AllowGet What 'sensitive information' could be disclosed when setting JsonRequestBehavior to AllowGet json json