views:

56

answers:

1

Hi,

im using asp.net mvc... how can I allow users to enter html into a textbox... im seting validaterequest to false and still getting this error:

A potentially dangerous Request.Form value was detected from the client (Summary="<a>").

i know its not recommended etc, but it's for internal use.

+2  A: 

Add the ValidateInput(false) attribute to your action

[ValidateInput(false)]
public ActionResult MyAction (int id, string content) {
}
Gregoire