Asp.Net MVC Input Validation still firing after being disabled

Question

I've disabled validateRequest in my web.Config, but the app is still firing the error:

A potentially dangerous Request.Form value was detected from the client

I've got the following in my web.Config

    <httpRuntime requestValidationMode="2.0" />
    <pages validateRequest="false">

I've also tried the following in my controller to no avail

<ValidateInput(False)> _
<AcceptVerbs(HttpVerbs.Post)> _
Function Edit(ByVal user As Domain.User, ByVal id As Integer) As ActionResult

score 2 · Accepted Answer · edited May 23 '17 at 12:07

2

You have to set the ValidInput in the Controller AND in the web.Config.

    <httpRuntime requestValidationMode="2.0"/>

edited May 23 '17 at 12:07

Community

answered Jun 28 '10 at 20:10

Chase Florell

1 Answers1