473,322 Members | 1,408 Online
Bytes | Software Development & Data Engineering Community
Post Job

Home Posts Topics Members FAQ

Join Bytes to post your question to a community of 473,322 software developers and data experts.

ValidateRequest

Hi,

I have a web form containing a TextBox that allows users to edit XML files.
When the page is posted, the changes are saved. This worked fine until the
ValidateRequest 'feature' came along in .Net 1.1

Now, I've been told that it can be disabled using the 'ValidateRequest'
attribute (of Page). This works on 1.1 and is fine since I always encode and
check my strings manually to ensure no malicious script can be submitted.

The problem is that our web app is distributed to various clients. When they
have 1.1 installed, everything's fine. But most of them are still on the 1.0
Framework. When they access that web form, they receive this error message :

The 'ValidateRequest' attribute is not supported by the 'page' directive.

Now, I've been looking everywhere on how to handle this. I can't believe I'm
the only one facing this problem. I just can't go and tell my clients to
add/remove this attribute in the .aspx source. What is the solution? Is
there a way to programmatically set the validateRequest attribute of a Page?
What I would like to do is check the version of the framework and add
validateRequest = False if I'm running on .Net 1.1... help!

Regards,
Shaun.
Nov 17 '05 #1
1 3202
Your not alone ... I have run into various problems with Caching, webcontrol
buttons and much more that simply don't work in the 1.0 framework and only
somewhat work now in 1.1. It is very frustrating and if you find a
solution, please also let me know.


"Shaun Dore" <sh*******@videotron.ca> wrote in message
news:zU*****************@charlie.risq.qc.ca...
Hi,

I have a web form containing a TextBox that allows users to edit XML files. When the page is posted, the changes are saved. This worked fine until the
ValidateRequest 'feature' came along in .Net 1.1

Now, I've been told that it can be disabled using the 'ValidateRequest'
attribute (of Page). This works on 1.1 and is fine since I always encode and check my strings manually to ensure no malicious script can be submitted.

The problem is that our web app is distributed to various clients. When they have 1.1 installed, everything's fine. But most of them are still on the 1.0 Framework. When they access that web form, they receive this error message :
The 'ValidateRequest' attribute is not supported by the 'page' directive.

Now, I've been looking everywhere on how to handle this. I can't believe I'm the only one facing this problem. I just can't go and tell my clients to
add/remove this attribute in the .aspx source. What is the solution? Is
there a way to programmatically set the validateRequest attribute of a Page? What I would like to do is check the version of the framework and add
validateRequest = False if I'm running on .Net 1.1... help!

Regards,
Shaun.

Nov 17 '05 #2

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

1
by: mar | last post by:
Does anybody know what configuration section should i set to false here. I also tried setting the page directive to false but that didn't fix it. Thanks! mc A potentially dangerous...
1
by: Benny | last post by:
Hello Experts, If the contents of a text box containing a html tag like formmated characters, i.e. <hello>, and if the validateRequest is set to true, it gives an error when post back: A...
4
by: Ray Williams | last post by:
I have a specific page that I have chosen to disable the .NET 1.1 validateRequest options by setting the page directive attribute of "validateRequest" from true to false. I manually validate all...
2
by: Tim Zych | last post by:
I'm trying to stop .Net from validating data entered into a textbox. When I enter < or > .Net returns an error: potentially dangerous Request.Form value was detected from the client... so a...
8
by: Max Metral | last post by:
Ok, I have a global page class derived from System.Web.UI.Page, let's call it BasePage. I have another class derived from that called MemberPage. It checks the Form collection if it's a post for...
2
by: Andy Fish | last post by:
Hi, I have one textbox on the form that needs to have ValidateRequest disabled, but it seems that it can only be enabled/disabled at a page level. assuming I have to disable it at for the...
3
by: Umut Tezduyar | last post by:
I couln't find the code begind property on the Page object that represents the "ValidateRequest" attribute on the @Page element. There must be some property that the PageParser knows what to do...
4
by: Dave H | last post by:
If put this into my Web.config. Shouldn't this turn off the ValiateRequest app wide? <configuration> <system.web> <pages buffer="true" validateRequest="false" /> I pass SQL around to...
2
by: \A_Michigan_User\ | last post by:
*WITHOUT* using: ValidateRequest="False" for the whole page (or my whole site).... How would I trap/detect that a textBox contains some illegal characters? (I'm using asp.net v1.1 and vb.net)...
0
by: DolphinDB | last post by:
Tired of spending countless mintues downsampling your data? Look no further! In this article, you’ll learn how to efficiently downsample 6.48 billion high-frequency records to 61 million...
0
by: ryjfgjl | last post by:
ExcelToDatabase: batch import excel into database automatically...
0
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
1
isladogs
by: isladogs | last post by:
The next Access Europe meeting will be on Wednesday 6 Mar 2024 starting at 18:00 UK time (6PM UTC) and finishing at about 19:15 (7.15PM). In this month's session, we are pleased to welcome back...
0
by: jfyes | last post by:
As a hardware engineer, after seeing that CEIWEI recently released a new tool for Modbus RTU Over TCP/UDP filtering and monitoring, I actively went to its official website to take a look. It turned...
1
by: PapaRatzi | last post by:
Hello, I am teaching myself MS Access forms design and Visual Basic. I've created a table to capture a list of Top 30 singles and forms to capture new entries. The final step is a form (unbound)...
1
by: Shællîpôpï 09 | last post by:
If u are using a keypad phone, how do u turn on JavaScript, to access features like WhatsApp, Facebook, Instagram....
0
by: Faith0G | last post by:
I am starting a new it consulting business and it's been a while since I setup a new website. Is wordpress still the best web based software for hosting a 5 page website? The webpages will be...
0
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 3 Apr 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome former...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.