while trying to execute my script in the front end text box to find the possible script injection in ASP.net. I got the below error,
A potentially dangerous Request.Form value was detected from the client (Text="venkat here? ").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example:. After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133.
Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (Text="Venkat Here ").
Solution:
1. Add the below content in web.config file,
2. Disabling request validation on a page
Cheers,
Venkatesan Prabu .J
Head, KaaShiv InfoTech
A potentially dangerous Request.Form value was detected from the client (Text="
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example:
Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (Text="
Solution:
1. Add the below content in web.config file,
2. Disabling request validation on a page
Cheers,
Venkatesan Prabu .J
Head, KaaShiv InfoTech
No comments:
Post a Comment