Geeks With Blogs
Ben Bastiaensen Living the .NET live

Up to ASP.NET 3.5 Request Validation is enabled by default. In order to to disable this for a page you needed to set the ValidationRequest property in the page directive to false.

This is no longer the default case in ASP.NET 4.0. If you want to use this behaviour you need to add the follwing setting in web.config

 <httpRuntime requestValidationMode="2.0" />

Of course you need to check all input in the page for XSS or other malicious input if you set the pages request validation to false.

Posted on Monday, December 13, 2010 1:05 PM ASP.NET | Back to top

Comments on this post: Request Validation in ASP.NET 4.0

No comments posted yet.
Your comment:
 (will show your gravatar)

Copyright © Ben Bastiaensen | Powered by: