How to disable request validation in ASP.NET MVC running at IIS6?

Question

I have ASP.NET MVC application with action which should process posted XML data. At Cassini is working everything fine but when I deploy application to IIS6 I am getting following error.

A potentially dangerous Request.Form value was detected from the client (xml="<?xml version="1.0" ...").

I tried decorate controller with ValidateInput(false) attribute and I also add following method to controller.

protected override void Initialize(RequestContext requestContext)
{
  ValidateRequest = false;
  base.Initialize(requestContext);
}

Nothing help.

Do you have any other idea how can I get rid off this annoying request validation?

Edit: Sorry. I was totally my error as usual. After I setup wildcard mapping everything is working fine.

RichardOD · Accepted Answer · 2009-09-29 14:23:17Z

2

Is it (ValidateInput) on a POST method? It only works with POST.

answered Sep 29, 2009 at 14:23

RichardOD

29.2k10 gold badges63 silver badges81 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

Jakub Šturc Over a year ago

Yes it is a post request that triggers this problem. I also tried to add AcceptVerbs(HttpVerbs.Post) and ValidateInput(false) to particular method but it seems it has now effect at IIS6.

RichardOD Over a year ago

Oddness- This should work. Are you definitely posting to that action, and not a different one?

Kieron · Accepted Answer · 2009-09-29 14:27:31Z

2

As Richard said, you should place it on the action method accepting the input:

[HttpPost]
[ValidateInput (false)]
public ActionResult DoTheThing (StuffBeingPostedBack stuff)
{
    // ...
}

answered Sep 29, 2009 at 14:27

Kieron

27.2k16 gold badges81 silver badges124 bronze badges

Comments

Kevin LaBranche · Accepted Answer · 2009-09-29 14:29:00Z

1

Put [ValidateInput(false)] above your ActionResult in your controller's post methods....

answered Sep 29, 2009 at 14:29

Kevin LaBranche

21.1k5 gold badges55 silver badges77 bronze badges

Collectives™ on Stack Overflow

How to disable request validation in ASP.NET MVC running at IIS6?

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related