InstantASP Community Forums / Old Forums / InstantForum.NET 3.x / Installation & Upgrades / Error: A potentially dangerous Request.Form / Latest Posts

RE: Error: A potentially dangerous Request.Form

Eralper — Tue, 10 Jun 2003 06:33:00 GMT

With validateRequest = "false", use Server.HtmlEncode() method

RE: Error: A potentially dangerous Request.Form

Ryan Healey — Mon, 05 May 2003 13:57:00 GMT

Hi Andy,

This is a problem with running InstantForum.NET with the .NET framework v1.1. This is not a problem with the forum software but a new script injection protection feature built into .NET v1.1.

To get around this problem you will need to either globally disable this feature within the system.web section of your applications web.config file as shown below...

<system.web><pages validateRequest="false" /></system.web>

Or disable this feature from the pages that use this control by adding validateRequest="false" to each page directive. The forum has it's own script protection so you can safely disable this.

More information on this can be found within the Request Validation - Preventing Script Attacks release note.

I hope this helps. If you have any further questions please don't hesitate to contact me

Error: A potentially dangerous Request.Form

Andy Augustine — Tue, 22 Apr 2003 10:47:00 GMT

Hi,

I've just installed InstantForum.NET. When i use the WYSIWYG tool to put in some tables, links, etc, i get the following error...

A potentially dangerous Request.Form value was detected from the client (_ctl1:WYSIWYG="<P align=left><FONT ...").