requestvalidationmode="2.0" validaterequest="false" in web.config not working

Question

I'm looking for a bit of help as this is now driving me crazy.

I have a tinyMCE text editor on my page which is populated with content which is already stored in the database as html.

eg. <p>first paragraph</p> <p>second paragraph</p> etc, etc with no problems there.

but when I make a change in the editor and then try to update the content in the database I get the error potentially dangerous request.form value was detected from the client

I made all the recommended changes in the web.config

requestvalidationmode="2.0"
validaterequest="false"

But still get the potentially dangerous request.form value was detected from the client error. This is happening in .NET 4.0 any help/advice would be great.

see this http://stackoverflow.com/questions/3072950/validaterequest-false-and-net-4-problem — V4Vendetta, Sep 09 '11 at 08:39

Grant Thomas · Accepted Answer · 2018-05-15T00:48:34.043

7

I wouldn't even try to enable this on a site-wide level in the web.config file - just do it per page, when you know specifically input data is safe:

<%@ Page ... ValidateRequest="false" %>

You can use an Umbraco control exposed specifically for this purpose from within a Template as such:

<umbraco:DisableRequestValidation runat="server" />

edited May 15 '18 at 00:48

answered Sep 09 '11 at 08:18

Grant Thomas

44,454
10
85
129

It was down to the above in a way. I'm using Umbraco CMS and needed to add to the top of the page to have the same effect. – Tom Maton Sep 12 '11 at 18:43
@Grant Thomas, can you give a link to your blog? Thanks – tatigo Feb 20 '14 at 19:14
4

Not an answer to the OP's question. The question why it was not working in the web.config, that is not answered. – Erik Dekker Apr 04 '14 at 10:02

score 5 · Answer 2 · answered Sep 09 '11 at 08:26

5

You have to post the section of web.config,

It should be,

<system.web>
    <compilation debug="true" targetFramework="4.0" />
    <httpRuntime requestValidationMode="2.0" />
</system.web>

answered Sep 09 '11 at 08:26

KV Prajapati

93,659
19
148
186

score 3 · Answer 3 · edited May 23 '17 at 10:29

3

There was similar topic already.

ValidateRequest="false" doesn't work in Asp.Net 4

Hope this will help.

edited May 23 '17 at 10:29

Community

1
1

answered Sep 09 '11 at 08:40

Assassin

1,296
2
14
17

score 1 · Answer 4 · edited Apr 15 '19 at 11:53

1

Add this line in your web.config file.

  <pages  validateRequest="false"></pages>

edited Apr 15 '19 at 11:53

Aarif

1,595
3
17
29

answered Apr 15 '19 at 10:59

user3404686

131
2
10

requestvalidationmode="2.0" validaterequest="false" in web.config not working

4 Answers4