title: is using MVC and JSON a possible DDOS risk
body: <p>Lets say im using an mvc application and either a create or getDetails function is called in AJAX, to help with page load times. </p>
  
  <p>Someone could easily look through the DOM there and get the URL of where you do your JSON request. </p>
  
  <p>that person could then easily write a little javascript snippet that calls that request 500 times per second and DDoS your site.</p>
  
  <p>Seen as you cannot hide your AJAX / JSON requests from the DOM, is there any way to avoid this?</p>