What characters am I allowed to use when submitting fields?

  • Thread starter Thread starter Nathan Sokalski
  • Start date Start date
N

Nathan Sokalski

When signing in using the following generated password:

+$cSB;!"q<y^I recieve the following error:A potentially dangerous Request.Form value was detected from the client (ctl00$cphContent$txtPassword="+$cSB;!"q<y^").System.Web.HttpRequestValidationException


What characters am I allowed to include in a value that will be generated and submitted in a TextBox? When I generate something simple (such as "testing" or "abc123") it gets submitted with no problem at all, so I need to know what characters will cause this problem so that I can modify my function for generating the String. Can anyone help me? Thanks.
 
depends on if you have validate request on (default). if you do then
asp.net is checking for injection attacks. ms does not document the list
but it "<" & "&#" combinations (probably also quotes). the list gets
updated as new attacks are found.


-- bruce (sqlwork.com)
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Back
Top