HttpRequestValidationexception on Asp.Net MVC

Question

I’m getting an HttpRequestValidationexception with this error message:

“A potentially dangerous Request.Form value was detected from the client”.

But I have AllowHtml on the property that I’m getting the error. The problem is that later in my code I’m getting the following property to know in witch format I will show my view ControllerContext.HttpContext.Request.Params.AllKeys.Contains("format"). And on this “Param Getter” I’m getting the error.

Let’s say my code is similar to the following:

public class House
{
    [AllowHtml]
    public string Text { get; set; }
    public string Name { get; set; }
}

[HttpPost, ValidateAntiForgeryToken]
public ActionResult CreateTopic(House h)
{
 //business code
 if(ControllerContext.HttpContext.Request.Params.AllKeys.Contains("format"))
 {
    Return view;
 }
 }

How can I solve this? I already try with the ValidateInput(false) attribute on the controller action method. Any idea?

Terry · Accepted Answer · 2012-06-11 18:09:12Z

5

Try adding this to your web.config in the <system.web> section:

<httpRuntime requestValidationMode="2.0"/>

Then include the [ValidateInput(false)] attribute back on your action.

Scott Hansleman explains this feature here.

edited Jun 11, 2012 at 18:09

answered Jun 11, 2012 at 16:36

Terry

14.2k9 gold badges58 silver badges84 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

elranu Over a year ago

Ok, but I putting in danger my application with this? What does requestValidationMode="2.0" ? It will still valid the rest of the inputs?

Terry Over a year ago

Yes it will, it just enables you to turn off input validation for specified actions by using the [ValidateInput] decorator. I've added a detailed article about this feature to the original answer.

Collectives™ on Stack Overflow

HttpRequestValidationexception on Asp.Net MVC

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related