Logo Questions Linux Laravel Mysql Ubuntu Git Menu
HTML CSS JAVASCRIPT SQL PYTHON PHP BOOTSTRAP JAVA JQUERY R React Kotlin
 

A potentially dangerous Request.Form value was detected from the client - ASP.NET MVC

Tags:

asp.net-mvc

dangerous-request

I am getting this error in my ASP.NET MVC application where I am taking HTML input from a WYSIWYG so I don't want the content validated.

I have attempted the solution I found here but it seems to make no difference in my MVC application. I have also tried doing it in the web.config but again - no joy.
Is this a bug in ASP.NET MVC or something?

like image 745
Ryall Avatar asked Sep 21 '09 16:09

Ryall

People also ask

How do you fix potentially dangerous request form value was detected from the client?

We can resolve your reported problem (A potentially dangerous Request. Form value was detected from the client) in ASP.NET Application. To resolve your problem, we need add the validateRequest as false in pages tag and add requestValidationMode as 2.0 in Web. config file.

Is a potentially dangerous request?

ASP.NET has detected data in the request that is potentially dangerous because it might include HTML markup or script. This error description means some one entered HTML markup or script which can be dangerous to the server.

What is AllowHtml in MVC?

AllowHtml attribute is used to allow sending HTML content or codes to server which by default is disabled by ASP.Net MVC to avoid XSS (Cross Site Scripting) attacks. In XSS (Cross Site Scripting) attacks, a hacker tries to inject HTML or JavaScript code to a website via INPUT fields such as TextBoxes, TextAreas, etc.

1 Answers

In MVC you would use the ValidateInput(false) attribute.

You then need to sanitize your inputs, e.g. with something like this (built in to ASP.NET 4.5+; use NuGet package for earlier).

like image 199
Craig Stuntz Avatar answered Oct 20 '22 18:10

Craig Stuntz
Sign in to Comment

Related questions

LINQ to Entities does not recognize the method 'System.String ToString()' method in MVC 4
ASP.net MVC4 WebApi route with file-name in it
Child Model Validation using Parent Model Values. Fluent Validation. MVC4
Error - A SignInResponse message may only redirect within the current web application - MVC 2.0 application
How do you declare a comment using the Razor view engine? [duplicate]
How to allow an anonymous user access to some given page in MVC?
ASP.NET MVC 5 how to delete a user and its related data in Identity 2.0
OutputCache setting inside my asp.net mvc web application. Multiple syntax to prevent caching
Alternative to System.Web.Security.Membership.GeneratePassword in aspnetcore (netcoreapp1.0)
ASP.NET MVC: How to display success confirmation message after server-side processing
How do I specify attributes for a Html.TextBox helper while maintaining the value retrieval from ViewData?
EF 6 System.Data.Objects.ObjectContext Error
Cannot apply indexing with [] to an expression of type 'System.Dynamic.DynamicObject'
asp.net mvc decorate [Authorize()] with multiple enums
How do I add data- attributes to Html.BeginForm
Viewbag check to see if item exists and write out html and value error
How to associate labels with radio buttons
How can I check if a user is in any one of a few different roles with MVC4 Simple membership?
How to serve html file from another directory as ActionResult
ASP.NET MVC and Ajax, concurrent requests?

Donate For Us

If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!