Level Extreme platform
Subscription
Corporate profile
Products & Services
Support
Legal
Français
A potentially dangerous Request.Path
Message
From
01/09/2011 09:53:45
 
 
To
01/09/2011 09:32:33
General information
Forum:
ASP.NET
Category:
Other
Environment versions
Environment:
VB 9.0
OS:
Windows 7
Network:
Windows 2003 Server
Database:
MS SQL Server
Application:
Web
Miscellaneous
Thread ID:
01522446
Message ID:
01522458
Views:
29
>>No
>
>Well, I do not see any reference between that link and the topic of this thread. The issue here is with requestPathInvalidCharacters. The link I gave is the one that negotiates with it. Basically, it only allows us to put the equivalent of the Web.Config file in the code instead. But, in that link you gave, this is referencing something else.

Again, No.
As I read it, if you specfy you own class derived from System.Web.Util.RequestValidator then you replace the default behaviour (which checks the RequestPathInvalidCharacters property) - although you could still call the base.IsValidRequestString() if it was useful.

FWIW, unless you are yourself creating a request which would violate the default rules I'd leave well alone. If you *are* generating a genuine request that falls foul of the default then use the override to identify and allow it - otherwise just pass the validation operation to the base class.....
Previous
Next
Reply
Map
View

Click here to load this message in the networking platform