title: How do I secure my JsonResult GET calls?
body: <p>I know how to use MVC's AntiForgeryToken attribute and it's associated HTML helper to help XSRF-secure my application's form POSTs.</p>
  
  <p>Can something similar can be done for JsonResults that implement GET?</p>
  
  <p>For instance, my View contains an onSubmit jQuery call like such:</p>
  
  <pre><code>$.getJSON("/allowActivity/YesOrNo/" + someFormValue, "{}", function(data) {
    if(data.Allow) {
      //Do something.
    }
  });
  </code></pre>
  
  <p>I want to make certain that this JsonResult is only callable from the intended page.</p>
  
  <p>EDIT:</p>
  
  <p>I found <a href="https://stackoverflow.com/questions/470011/security-and-cross-domain-with-asp-net-mvc-jsonresult-and-jquery/470039">this post</a> about a similar question, with no concrete answer.</p>
  
  <p>What is the easiest way to ensure that my GET(non-destructive) URL is consumed only by an AJAX call from my own page?</p>