A potentially dangerous Request.Form value was detected from the client - ASP.NET MVC

Question

I am getting this error in my ASP.NET MVC application where I am taking HTML input from a WYSIWYG so I don't want the content validated.

I have attempted the solution I found here but it seems to make no difference in my MVC application. I have also tried doing it in the web.config but again - no joy. Is this a bug in ASP.NET MVC or something?

Answer 1

Just place this attribute: [ValidateInput(false)] on the action method on the controller that handles the form post.

Answer 2

In MVC you would use the ValidateInput(false) attribute.

You then need to sanitize your inputs, e.g. with something like this.

Answer 3

Found the answer here:

http://stackoverflow.com/questions/486408/can-a-pages-validaterequest-setting-be-overridden

Answer 4

use <httpRuntime requestValidationMode="2.0" /> in web config