validateRequest problems

M

mar

Does anybody know what configuration section should i set
to false here. I also tried setting the page directive
to false but that didn't fix it.
Thanks!
mc


A potentially dangerous Request.Form value was detected
from the client (ResultInput="...="1.0"?> <ResultData
xmlns:xs...").
Description: Request Validation has detected a
potentially dangerous client input value, and processing
of the request has been aborted. This value may indicate
an attempt to compromise the security of your
application, such as a cross-site scripting attack. You
can disable request validation by setting
validateRequest=false in the Page directive or in the
configuration section. However, it is strongly
recommended that your application explicitly check all
inputs in this case.

Exception Details:
System.Web.HttpRequestValidationException: A potentially
dangerous Request.Form value was detected from the client
(ResultInput="...="1.0"?> <ResultData xmlns:xs...").

Source Error:

An unhandled exception was generated during the execution
of the current web request. Information regarding the
origin and location of the exception can be identified
using the exception stack trace below.

Stack Trace:


[HttpRequestValidationException (0x80004005): A
potentially dangerous Request.Form value was detected
from the client (ResultInput="...="1.0"?>
<ResultData xmlns:xs...").]
System.Web.HttpRequest.ValidateString(String s, String
valueName, String collectionName) +230
System.Web.HttpRequest.ValidateNameValueCollection
(NameValueCollection nvc, String collectionName) +99
System.Web.HttpRequest.get_Form() +121
System.Web.UI.Page.GetCollectionBasedOnMethod() +70
System.Web.UI.Page.DeterminePostBackMode() +47
System.Web.UI.Page.ProcessRequestMain() +2106
System.Web.UI.Page.ProcessRequest() +218
System.Web.UI.Page.ProcessRequest(HttpContext context)
+18

System.Web.CallHandlerExecutionStep.System.Web.HttpApplica
tion+IExecutionStep.Execute() +179
System.Web.HttpApplication.ExecuteStep(IExecutionStep
step, Boolean& completedSynchronously) +87
 
W

Wim Hollebrandse

Add validateRequest="false" to your Page directive, eg.:

<%@ Page validateRequest="false" %>

Alternatively - if you want to disable request validation for your whole web
app you can add the following to the system.web section of your web.config:

<pages validateRequest="false" />

Hope that helps,
Wim Hollebrandse
http://www.wimdows.com
http://www.wimdows.net
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top