SPC020202: Avoid setting 'AllowUnsafeUpdates' on SPWeb

The assembly should not call Microsoft.SharePoint.SPWeb.AllowUnsafeUpdates to run make changes to SPWeb with a lower security context. Setting this property to true opens security risks, potentially introducing cross-site scripting vulnerabilities.

Remove calls to 'Microsoft.SharePoint.SPWeb.AllowUnsafeUpdates' to avoid changes with a lower security context. If you need to use it ensure to change the value back to its original state after your operations. See sample below:

Good Practice:

• SPWeb.AllowUnsafeUpdates property
• Hristo Pavlov's Blog: What you need to know about AllowUnsafeUpdates