views:

10

answers:

0

We're rewriting our 2008 VS website in 2010 and I have just gotten to our webServices and when I went to test them out I'm getting the Cross Site Scripting message because we need to accept XML as our input. I've seen all over the web where people are just putting the following into the web.config and I would rather not take our site back down to 2.0 if possible.

httpRuntime requestValidationMode="2.0"

Does anyone know of another way around this? I've seen some talk about encoderTypes and Request Validation but no good examples of this.

Thank you.