I'm wondering if anyone knows of a way to allow something like "<<" to be submitted, without setting validaterequest=falseI have a creole parser, and the recommended plugin/macro syntax is:
<<macro-name argo0=foo arg1=bar argN=qux>>
I just updated my project to ASP.NET 4. All of a sudden, some of my HttpHandlers are giving ValidateRequest errors. This is because the user HAS to be able to put an XML string in the querystring.I know how to disable ValidateRequest on a page, but how do I do it on an HTTPHandler?
View 1 RepliesI have this:
[Code]....
[Code]....
How do I get it to output the submitted value, and have the dropdownlist populated with the item selected after submission? I don't want to use ViewState and I would really like to have the dropdown dynamically populated, opposed to statically.
In my application users submit a certain form. I'd like to email specific people once the form has been submitted. How do I do this? In the code behind? I'd like to create a default email that is sent out after the form has been submitted with information about the form that has just been submitted. I'm writing in VB.
View 8 RepliesOn my page I have some text boxes that users can enter values in. The first time they submit the page it gets the values from the text box fine. But when the user goes back using their browser back button and changes a value and resubmits, it shows the value from the first time they submitted, not the new value they just entered.
View 6 RepliesError in File C:WINDOWSTEMPPOC1 {EFC98CD9-964C-4683-96BA-E02D634AF240}.rpt: The request could not be submitted for background processing.vb code:
Dim objReport As New CrystalDecisions.CrystalReports.Engine.ReportClass
Dim location As String = context.Server.MapPath("../POC/POC1.rpt")
objReport.FileName = location
[code]...
tell me the use of Validaterequest False?
View 4 RepliesI'm using FreeTextBox HTML editor in some webforms in my asp.net project . if I do not set ValidateRequest property to false I get this error :
A potentially dangerous Request.Form value was detected from the client
It's OK in admin folder though , Because only authorized users have access to work with it . But how about public pages like sections where every users have access to leave comments(using FreeTextBox for collecting users comment ) ? Isn't risky for XSS Attack ? If the answer is not Yes , So what's ValidateRequest property for?
My ASP.NET page contains "ValidateRequest = true". However, there is one textbox in the page for which I don't want ASP.NET to validate. Is there a way to make it false for that one control? If there isn't, is there a way to ignore the "Potential Threat" error, assuming it comes from that particular control?
View 1 RepliesI came across this example [URL] I want to create a form that will be validated when Submitted. In the above example you can keep on dragging colored boxed on the Drop It Here area. When a form is submitted, I want to validate Drop It Here area to see if it is empty or user drop a colored box here. Is this possible to do and if so, how to do it. I tried regular validation coltrols and they didn't seem to work.
View 1 RepliesI'm new to jQuery so this may be a real simple answer. I have a ASP.NET project that I'm trying to dynamically add content to an ASP Label element by typing into a text box and clicking a button. Sounds simple right? Well, I can get the content to added, but when the form is submitted the Label element is still empty? Why is the new data not submitted? Here's some sample code:
<asp:Label ID="lblContainer" Text="" runat="server" />
<input type="text" name="tag" id="tag" />
<input type="button" name="AddTag" value="Add" class="button" onclick="addTag();" />
function addTag() {
if ($("#tag").val() != "") {
$("#lblContainer").append('$("#tag").val()' + '<br />');
$("#tag").val("");
}
}
in aspx file i have two simple controls
[Code]....
Then in Code behind file i wrote this
[Code]....
When i check whether page is posted back or not with this method , by clicking the button
if(Page.IsPostBack)
{
..
}
then web form does not respond any more ..and when not using this condition ajax is working fine.
im trying to set focus in my textbox with validation request but its not working.
<asp:TabContainer ID="TabContainer1" runat="server" ActiveTabIndex="0" OnClientActiveTabChanged = "clientActiveTabChanged">
<asp:TabPanel runat="server" HeaderText="Personal" ID="TabPanel1">
[Code]....
when im in next tab its not return me where is the validation is.
In the notes for Step 1 in the "How To: Prevent Cross-Site Scripting in ASP.NET" it is stated that you should "not rely on ASP.NET request validation. Treat it as an extra precautionary measure in addition to your own input validation."
View 2 RepliesWhat is the difference between enableEventValidation and validateRequest? Although the former is on postback/callback caused by a control (Server side only I assume?, the latter is on every request, which is caused by a control posting back anyway? Or would validateRequest kick in by a standard html link being clicked?
View 2 RepliesI have created a .aspx page that contains a web form. The information in the form is submitted to a companies web site and once accepted is manipulated by the company.
This all works wonderful.
My problem is that once the data submitted to their site my page receives a response code. (1 = Member Added, 2 = Updated Member...)
How do I go about capturing this response code? Currently I end up with a blank page and a number in the upper left corner.
Inside my Asp.Net MVC application, in the comments section the user will be able to add html tags (p, h1....) but the problem is: how can I remove any malicious code (script...) from the code the user has submitted?
View 1 RepliesIts hard to describe in short what i would like to do.
I have a form that a user fills and then submits the data into a database, it needs to be approved in several places before its finalized. It sends out an email with information to the approver, what i would like is a link in the email so that the approver is swiftly taken to the next step in the process.
The next step in the process looks something like this
http://localhost:2876/CPNCMS/visitoraccess/InitApprove.aspx?Id=22
the sql submission looks like this
[Code]....
I've got a ajax page with 2 panels on it. On Panel1 there is a next button. On that panel there is a pref. button and a next button. But if i put the pref. button he should do an action, but thats not possible because there are requestedfieldvalidators on that page. So i need to fill the page first, and then i can go back.
But on the next i want the validators. How can i make this possible?
What is the difference between validateRequest (which validates form and querystring values) and also enableeventvalidation, which works on post/call backs? In specific, what confuses me is that validateRequest can only be possible by a postback as this is how form values etc will be picked up?
View 1 RepliesFYI I am using .NET 4.0 / MVC 3. In my controller, the following is my code:
[HttpPost]
[ValidateInput(false)]
public ViewResult Edit(ContentTemplateView contentTemplateView, FormCollection collection)
Everything works fine when I don't enter HTML, so I know the proper controller is being fired. Also, I have following set properly in my web.config files:
<httpRuntime requestValidationMode="2.0"/>
I only get this problem when I include the FormCollection (which is needed for this particular Controller). So what exactly am I doing wrong? [I have done what was proposed on the following questions, and they work as long as there is no FormCollection. None of them offer a solution with an included FormCollection] Why is ValidateInput(False) not working? Asp.Net MVC Input Validation still firing after being disabled ValidateInput Attribute Doesn't Seem To Work in ASP.NET MVC
I want to retrieve the full SQL that my Web Application generates and executes on the database. So when the INSERTED or UPDATED events are triggered on the SqlDataSource, I want to get that particular SQL Statement.
The problem I've got there though is when I use "e.Command.CommandText" that gets the SQL statement with the paramter names NOT the paramter values. I specifically need the values.
So... how can I get it to display the full SQL statement containing submitted values!?
I have a webform (parent) with embedded webgrid(child) which uses sqldatasource. What I wanted to accomplish is to save both the form data and the grid data when the Save button is clicked. I tried to save form data(parent) in sqldatasource1_inserting event, does not work. I think there should be a way to do it, just do not know how.
View 4 Replieshow i will prevent user to resend data from refreshing URL. actually after posting data to the server and returning back data by the server to the client. if user refresh the url address then again it send back to the server withe previous data. so how can i prevent it by c#, asp.net.
View 2 RepliesHere's the situation. I have an aspx page that is designed to receive a POST request with some XML values, parse the XML, grab the relevant items, and write them to the page. The problem arises when I try to launch the page using the POST request. When I launch using Fiddler, building the request manually and just pasting the XML in the body of the request everything works fine and dandy. When I launch the page from a basic HTML form, however, things don't go so great. The HTML form that I'm using looks like this:
[Code]....
When the page loads I get the error:
A potentially dangerous Request.Form value was detected from the client Everything I've read so far has told me that the solution is to add ValidateRequest="false" to the page directive in the top of the .aspx file, or in the pages element of the web.config file. But neither of these work. Afterwards, I still get the same error. Any idea what I need to do to make this work?