asp.net - Request Validation failed in .NET 4.0 even though explicity set in Page Directive -
i have .net page application failing it's request validation because of "bad characters" such "< / > %". secure admin form behind password protected page, , need users able enter in these "potentially harmful" characters. used working. moved directory new location , getting below error. have explicitly set validaterequest="false" in <%@ page %> settings. running application vb.net 4.0 on windows 2012 server on iis 8.5. suggestions page working?
description: asp.net has detected data in request potentially dangerous because might include html markup or script. data might represent attempt compromise security of application, such cross-site scripting attack. if type of input appropriate in application, can include code in web page explicitly allow it. more information, see http://go.microsoft.com/fwlink/?linkid=212874.
exception details: system.web.httprequestvalidationexception: potentially dangerous request.form value detected client
found this: http://www.codeproject.com/tips/297679/a-potentially-dangerous-request-form-value-was-det
make sure statement in right area of web config file
Comments
Post a Comment