validateRequest problems

  • Thread starter Thread starter mar
  • Start date Start date
M

mar

Does anybody know what configuration section should i set
to false here. I also tried setting the page directive
to false but that didn't fix it.
Thanks!
mc


A potentially dangerous Request.Form value was detected
from the client (ResultInput="...="1.0"?> <ResultData
xmlns:xs...").
Description: Request Validation has detected a
potentially dangerous client input value, and processing
of the request has been aborted. This value may indicate
an attempt to compromise the security of your
application, such as a cross-site scripting attack. You
can disable request validation by setting
validateRequest=false in the Page directive or in the
configuration section. However, it is strongly
recommended that your application explicitly check all
inputs in this case.

Exception Details:
System.Web.HttpRequestValidationException: A potentially
dangerous Request.Form value was detected from the client
(ResultInput="...="1.0"?> <ResultData xmlns:xs...").

Source Error:

An unhandled exception was generated during the execution
of the current web request. Information regarding the
origin and location of the exception can be identified
using the exception stack trace below.

Stack Trace:


[HttpRequestValidationException (0x80004005): A
potentially dangerous Request.Form value was detected
from the client (ResultInput="...="1.0"?>
<ResultData xmlns:xs...").]
System.Web.HttpRequest.ValidateString(String s, String
valueName, String collectionName) +230
System.Web.HttpRequest.ValidateNameValueCollection
(NameValueCollection nvc, String collectionName) +99
System.Web.HttpRequest.get_Form() +121
System.Web.UI.Page.GetCollectionBasedOnMethod() +70
System.Web.UI.Page.DeterminePostBackMode() +47
System.Web.UI.Page.ProcessRequestMain() +2106
System.Web.UI.Page.ProcessRequest() +218
System.Web.UI.Page.ProcessRequest(HttpContext context)
+18

System.Web.CallHandlerExecutionStep.System.Web.HttpApplica
tion+IExecutionStep.Execute() +179
System.Web.HttpApplication.ExecuteStep(IExecutionStep
step, Boolean& completedSynchronously) +87
 
Add validateRequest="false" to your Page directive, eg.:

<%@ Page validateRequest="false" %>

Alternatively - if you want to disable request validation for your whole web
app you can add the following to the system.web section of your web.config:

<pages validateRequest="false" />

Hope that helps,
Wim Hollebrandse
http://www.wimdows.com
http://www.wimdows.net
 
Back
Top