find a location for property in a new city

Wednesday 14 April 2010

Potentially dangerous request .NET4 upgrade

I encountered an error after upgrading to ASP.NET 4 from 3.5 whereby my page was throwing an HttpRequestValidationException error. With error message "A potentially dangerous Request.Form value was detected from the client". This problem DID NOT occur before on this page that uses a TinyMCE rich text editor.

This page is sending dangerous requests since it is using a rich text editor that post HTML. This was worked around before by putting ValidateRequest="false" in the page declaration.

This seems to be ignored now in .NET4! Really I should be changing TinyMCE to be posting BBCode and replacing it with proper HTML on the server... but... I'm not since this is only for trusted internal users... and I can't be bothered ;)

Workaround

requestValidationMode="2.0" needs to be added to the httpRuntime element of the <system.web> section of the web.config.

Follow britishdev on Twitter

Posted by Colin Farr at Wednesday, April 14, 2010 Labels: , ,

3 comments:

  1. Anonymous25 May 2010 at 19:05

    That what I was looking for.
    Thx dude !

    ReplyDelete
  2. Colin Farr25 May 2010 at 22:31

    Cheers mate. Makes it all worth while.

    ReplyDelete
  3. Samantha Johnson14 May 2020 at 10:22

    This is my first visit to this site and I am very happy to read your blog post. Awesome blog entry. This is outright enchantment from you! I have never observed a more magnificent post than this one. You've truly filled my heart with joy today with this. I trust you keep this up. I have bookmarked this site. Such Beautiful astonishing site continue posting. I will be related with this blog. Much obliged to you. If you are in search of writing related tips visit site Write my Essay, you can get better writing help from here.

    ReplyDelete

Subscribe to: Post Comments (Atom)