Introduction:
In this post I will explain how to solve the problem “A potentially dangerous Request.Form value was detected from the client in ASP.NET WebForms” using asp.net.
Description:
In previous post I explained clearly about Rich textbox sample in asp.net . After completion code if I try to insert some html formatted data in database using rich textbox I got error like “A potentially dangerous Request.Form value was detected from the client in ASP.NET WebForms”
Sample data I used to insert in database
<html xmlns="http://www.w3.org/1999/xhtml">
<head runat="server">
<title>Untitled Page</title>
</head>
<body>
<form id="form1" runat="server">
<div>
</div>
</form>
</body>
</html>
|
After enter the above formatted html data in Rich Textbox and I tried to insert data then I got error message like
Server Error in ‘/RichTextboxSample’ Application.
A potentially dangerous Request.Form value was detected from the client (remarks =”<html></html>”)
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case.
Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (remarks="<html></html>5678,<c…").
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below. |
This error occurs during insertion of html format data into database to eliminate this error we need to set ValidateRequest="false" in @Page line of web page or web.config file to solve security problems.
To solve this problem we need to add the ValidateRequest="false" in @Page line of web page like this
WebForms
<%@ Page Language="C#" AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="_Default" ValidateRequest="false" %>
|
In this way we need to set ValidateRequest="false" in required pages otherwise we can set it globally to work for all the pages without having this error we need to add ValidateRequest="false" in web.config file under system.web section like this
Web.Config
<system.web>
………………………
<httpRuntime requestValidationMode="2.0" />
<pages validateRequest="false">
</pages>
………………………
</system.web>
|
After set this property in webpage or web.config my problem has sovled and my code works perfectly. I hope it helps to solve your problem.
Happy Coding………
|
If you enjoyed this post, please support the blog below. It's FREE! Get the latest Asp.net, C#.net, VB.NET, jQuery, Plugins & Code Snippets for FREE by subscribing to our Facebook, Twitter, RSS feed, or by email. |
|||
Subscribe by RSS
Subscribe by Email
|
|||
37 comments :
Great.It Worked me Suresh, thank you very much
it worked for me as well...thanks !
thx..
great.....thank you bhaii......
still getting error even after adding
hi
i am put this also but cant working
hello suresh,after puting validaterequest="False" i am still getting these error...pls do something...
A potentially dangerous Request.Form value was detected from the client (MainContent_FreeTextBox1="abc").
let it be...I correct it...by puting this also....your code was really helpful bro....thanx...
hhhh
really its working... Thank you sir... keep it up...
You help me solve the 'bad request' problem!
tu,
i still cannot get rid of the potential dangerous error. sir, can u please help me out
Thanks! :) It worked for me.
I am storing the contents of RichBox in table with datatype nvarchar(MAX),still it is storing only partial data from rich tb..Any idea what to do
hi it's working for me thank u.
I try it, but I can not find the bad Request.
Dear Suresh,
I add validateRequest="false" in web config,design aspx page.But still the same error occured.Please Can you guide me
Dear suresh,
its not working for me.please provide another solution.
set
validationmode=2.0
then it will work
sir,
i am inserting html code in database and i want to retrieve plain text
so sir plz tell me how to convert html code into plain text
one more thing sir plz tell me the name of the control(facebook) which u use in your website in right side
thx..
this is not working....i still get the same error.
if you add validateRequest="false" there is a possibility of XSS attack and website getting hacked.
I have added the same but still i am getting the same error...
A potentially dangerous Request.Form value was detected from the client (FreeTextBox1="sdsadfsaf").
this error is coming after giving ValidateRequest="false" in iis. but it working in visual studio environment
Could you please help in this
how can i print freetext box data on crystal report
because it wad didnt show as it i save on database
help me
it shows ram is
like this
how to print as it is
i m using mysql -: text (datatype)
After set this property in webpage or web.config my problem has solved and my code works perfectly. I hope it helps to solve your problem.
thankx
Great sir i done solve the problems of your article.
How we can edit the saved data?
HI
any can help me how to add Rich text box dll file in my project.
Without doing validateRequest=false can able to solve the issue another way.is it possible????
how we can upload images from local drive..???
Is there any way to solve the issue without setting ValidateRequest=false?
i want to only specific page validation false not all application so please help me
Note: Only a member of this blog may post a comment.