2
Vote

Request validation error when saving configuration page

description

I've just installed dasBlog to a folder on my production site for testing. The app runs and I'm able to login and then enter the Configuration page. However, when I hit the Save Settings button, I get the following error:
 

Server Error in '/dasBlog' Application.

 
A potentially dangerous Request.Form value was detected from the client (EditConfigBox:textRSSItemFooter="...nsored by <a href="http://www....").
Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case.
 
Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (EditConfigBox:textRSSItemFooter="...nsored by <a href="http://www....").
 
Source Error:
 
 
[No relevant source lines]

 
Source File: d:\ASPNetTemp\dasblog\c1d96733\c64a8e43\App_Web_y2lt3gx3.14.cs Line: 0
 
Stack Trace:
 
 
[HttpRequestValidationException (0x80004005): A potentially dangerous Request.Form value was detected from the client (EditConfigBox:textRSSItemFooter="...nsored by <a href="http://www....").]
System.Web.HttpRequest.ValidateString(String s, String valueName, String collectionName) +8724362
System.Web.HttpRequest.ValidateNameValueCollection(NameValueCollection nvc, String collectionName) +111
System.Web.HttpRequest.get_Form() +129
System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull) +114
System.Web.UI.Page.DeterminePostBackMode() +63
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +6785
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +242
System.Web.UI.Page.ProcessRequest() +80
System.Web.UI.Page.ProcessRequestWithNoAssert(HttpContext context) +21
System.Web.UI.Page.ProcessRequest(HttpContext context) +49
ASP.permalink_aspx.ProcessRequest(HttpContext context) in d:\ASPNetTemp\dasblog\c1d96733\c64a8e43\App_Web_y2lt3gx3.14.cs:0
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +181
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +75
 

Version Information: Microsoft .NET Framework Version:2.0.50727.3603; ASP.NET Version:2.0.50727.4049

comments