AntiSSRFPolicy.AllowPlainTextHttp Property

Changing an AntiSSRFPolicy instance to allow plaintext HTTP means you will be able to send HTTP requests without the recommended TLS encryption.

Definition

Determines whether HTTPS is required or HTTP is allowed.

public bool AllowPlainTextHttp { get; set; }

With ALL configuration options, HTTP is disallowed unless AllowPlainTextHttp is explicitly set to true.

Property Value

bool

  • true if HTTP should be allowed.
  • false if HTTPS should be required.

Exceptions

AntiSSRFException Thrown when attempting to change the property after the policy has been used to create a handler via GetHandler().


Copyright © 2026 Microsoft Corporation. Distributed under the MIT license.