2021-01-13 11:35:08 +00:00
|
|
|
== Sensitive Code Example
|
|
|
|
|
|
|
|
|
|
At Controller level:
|
|
|
|
|
|
|
|
|
|
----
|
|
|
|
|
[ValidateInput(false)]
|
|
|
|
|
public ActionResult Welcome(string name)
|
|
|
|
|
{
|
|
|
|
|
...
|
|
|
|
|
}
|
|
|
|
|
----
|
2021-04-26 17:29:13 +02:00
|
|
|
|
|
|
|
|
At application level, configured in the Web.config file:
|
|
|
|
|
|
|
|
|
|
----
|
|
|
|
|
<configuration>
|
|
|
|
|
<system.web>
|
|
|
|
|
<pages validateRequest="false" />
|
|
|
|
|
...
|
|
|
|
|
<httpRuntime requestValidationMode="0.0" />
|
|
|
|
|
</system.web>
|
|
|
|
|
</configuration>
|
|
|
|
|
----
|
