How do I use String.Replace method inside a custom ASP.NET MVC Route?

Question

I'm still a bit new to ASP.Net MVC and Custom Routing and I'm not quite sure how to ask this question other than to post the URL link and the route that I'm using and ask for advice.

The problem is:

A potentially dangerous Request.Path value was detected from the client (&).

This is being caused by an "&" symbol inside my link:

http://localhost/search/cars-&-motorcycles

And, here's my route:

routes.MapRoute(
    "CategorySearch",
    "category/{searchcriteria}",
    new { controller = "Listing", action = "Index", isCategory = true, searchcriteria = UrlParameter.Optional }
);

What I want to do is strip out the "&" from the optional paramter before it gets passed, hopefully that will correct the "potentially dangerous" issue that I'm experiencing. I've tried to use

UrlParameter.Optional.ToString().Replace("&", "")

Is it even possible to strip out that "&" symbol from somewhere inside the Route.MapRoute method at all?

Isn't this easily solvable by just percent-encoding the ampersand? stackoverflow.com/q/16622504 — Robert Harvey
– Robert Harvey, Commented Jun 1, 2014 at 23:05
Thanks Robert, I was trying to react to the incoming invalid symbol, instead of changing it to send the encoded symbol as you and itsme86 suggested. — Mystus
– Mystus, Commented Jun 2, 2014 at 0:06

Robert Harvey · Accepted Answer · 2014-06-01 23:18:54Z

1

You can encode it using HtmlHelper.Encode:

string encodedUrl = HtmlHelper.Encode("http://localhost/search/cars-&-motorcyles");

edited Jun 1, 2014 at 23:18

Robert Harvey

182k48 gold badges349 silver badges516 bronze badges

answered Jun 1, 2014 at 23:13

itsme86

19.6k4 gold badges44 silver badges60 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Robert Harvey Over a year ago

Can you do this within the routing engine?

Mystus Over a year ago

That was really my main question, and although this solution solves it for me, I was actually wanting to do this inside the actual routing engine itself to handle if and when a user enters an invalid symbol in a search text box. Instead I'll need to strip it before posting the data.

Rowan Freeman Over a year ago

If I recall correctly, the "potentially dangerous Request" (request validation) is triggered very early in the request pipeline. I suspect it will be thrown before it gets to your routing. You would have to disable request validation. I would do that anyway.

Collectives™ on Stack Overflow

How do I use String.Replace method inside a custom ASP.NET MVC Route?

1 Answer 1

3 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

3 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related