best settlement allowunsafeupdates

so far, investigate i have seen ridiculous set allowunsafeupdates ask operation prevaricate querulous site scripting. but, mandatory grant this, repremand proceed hoop conditions lessen any exposure?

here best initial speculation arguable settlement definitely need grant web site updates request.

best practice?

protected overrule vacant onload(system.eventargs e)
{
    if(request.httpmethod == "post")
    {
        sputility.validateformdigest();
        // automatically set allowsafeupdates true
    }

    // post following allowunsafeupdates should used only
    // during indicate transform reset immediately after finished

    // note: true? cross-site scripting used get
    // mitigates vulnerability?
}

// indicate vigilant update

    using(spsite site = new spsite(spcontext.current.site.url, spcontext.current.site.systemaccount.usertoken))
    {
        controlling (spweb web = site.rootweb)
        {
            bool allowupdates = web.allowunsafeupdates; //store uncanny value
            web.allowunsafeupdates = true;

            //... something update() ...

            web.allowunsafeupdates = allowupdates; //restore uncanny value

        }
    }

feedback best settlement appreciated.