Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
How to take action on Potentially Dangerous
Message
From
22/05/2006 13:35:55
 
 
To
22/05/2006 10:52:14
Keith Payne
Technical Marketing Solutions
Florida, United States
General information
Forum:
ASP.NET
Category:
Coding, syntax and commands
Environment versions
Environment:
VB 8.0
OS:
Windows XP SP2
Database:
Visual FoxPro
Miscellaneous
Thread ID:
01123870
Message ID:
01124022
Views:
14
>There is a setting called ValidateRequest that you can set to turn this feature on and off. The setting is in Machine.config, web.config, and can be set in the @ Page directive.
>
>There is not an event hook for this, but it throws an HttpRequestValidationException that you can intercept in a Try/Catch block. I'm not too sure where to put the Try/Catch. You can also look for the error in the Global.asax Application_Error event.

After looking more at what causes this, I found that the memo field contains some HTML characters such as B and BR. .NET handles those characters automatically on form display and postback if we enter them as encoded. This resolves the issue. I do not feel ok to workaround this issue by changing the top level and opening that door. I made some tests. If I enter the opening character of a tag as encoded, it is saved ok and shown ok on the way back. I will have a procedure which will apply some conversions on the client data once we go in production. Thanks
Michel Fournier
Level Extreme Inc.
Designer, architect, owner of the Level Extreme Platform
Subscribe to the site at https://www.levelextreme.com/Home/DataEntry?Activator=55&NoStore=303
Subscription benefits https://www.levelextreme.com/Home/ViewPage?Activator=7&ID=52
Previous
Reply
Map
View

Click here to load this message in the networking platform