asp.net-mvcdangerous-request

A potentially dangerous Request.Form value was detected from the client - ASP.NET MVC

I am getting this error in my ASP.NET MVC application where I am taking HTML input from a WYSIWYG so I don't want the content validated.

I have attempted the solution I found here but it seems to make no difference in my MVC application. I have also tried doing it in the web.config but again - no joy.
Is this a bug in ASP.NET MVC or something?

Solution

  • In MVC you would use the ValidateInput(false) attribute.

    You then need to sanitize your inputs, e.g. with something like this (built in to ASP.NET 4.5+; use NuGet package for earlier).