ValidateRequest

[Shaun Dore]

Hi,

I have a web form containing a TextBox that allows users to edit XML files.
When the page is posted, the changes are saved. This worked fine until the
ValidateRequest 'feature' came along in .Net 1.1

Now, I've been told that it can be disabled using the 'ValidateRequest'
attribute (of Page). This works on 1.1 and is fine since I always encode and
check my strings manually to ensure no malicious script can be submitted.

The problem is that our web app is distributed to various clients. When they
have 1.1 installed, everything's fine. But most of them are still on the 1.0
Framework. When they access that web form, they receive this error message :

The 'ValidateRequest' attribute is not supported by the 'page' directive.

Now, I've been looking everywhere on how to handle this. I can't believe I'm
the only one facing this problem. I just can't go and tell my clients to
add/remove this attribute in the .aspx source. What is the solution? Is
there a way to programmatically set the validateRequest attribute of a Page?
What I would like to do is check the version of the framework and add
validateRequest = False if I'm running on .Net 1.1... help!

Regards,
Shaun.

[michael]

Your not alone ... I have run into various problems with Caching, webcontrol
buttons and much more that simply don't work in the 1.0 framework and only
somewhat work now in 1.1. It is very frustrating and if you find a
solution, please also let me know.


"Shaun Dore" <sh*******@videotron.ca> wrote in message
news:zU*****************@charlie.risq.qc.ca...

Hi,

I have a web form containing a TextBox that allows users to edit XML files. When the page is posted, the changes are saved. This worked fine until the
ValidateRequest 'feature' came along in .Net 1.1

Now, I've been told that it can be disabled using the 'ValidateRequest'
attribute (of Page). This works on 1.1 and is fine since I always encode and check my strings manually to ensure no malicious script can be submitted.

The problem is that our web app is distributed to various clients. When they have 1.1 installed, everything's fine. But most of them are still on the 1.0 Framework. When they access that web form, they receive this error message :
The 'ValidateRequest' attribute is not supported by the 'page' directive.

Now, I've been looking everywhere on how to handle this. I can't believe I'm the only one facing this problem. I just can't go and tell my clients to
add/remove this attribute in the .aspx source. What is the solution? Is
there a way to programmatically set the validateRequest attribute of a Page? What I would like to do is check the version of the framework and add
validateRequest = False if I'm running on .Net 1.1... help!

Regards,
Shaun.