asp.net - Request Validation failed in .NET 4.0 even though explicity set in Page Directive -


i have .net page application failing it's request validation because of "bad characters" such "< / > %". secure admin form behind password protected page, , need users able enter in these "potentially harmful" characters. used working. moved directory new location , getting below error. have explicitly set validaterequest="false" in <%@ page %> settings. running application vb.net 4.0 on windows 2012 server on iis 8.5. suggestions page working?


description: asp.net has detected data in request potentially dangerous because might include html markup or script. data might represent attempt compromise security of application, such cross-site scripting attack. if type of input appropriate in application, can include code in web page explicitly allow it. more information, see http://go.microsoft.com/fwlink/?linkid=212874.

exception details: system.web.httprequestvalidationexception: potentially dangerous request.form value detected client

found this: http://www.codeproject.com/tips/297679/a-potentially-dangerous-request-form-value-was-det

make sure statement in right area of web config file


Comments

Popular posts from this blog

javascript - Bootstrap Popover: iOS Safari strange behaviour -

Magento/PHP - Get phones on all members in a customer group -

session - Logging Out Using PHP -