=== on 6 Apr 2018, 17:40:31 Alexandre Gigleux wrote: This rule should raise an issue if both [HttpPost] and [System.Web.Mvc.ValidateInputAttribute(false)] are set on a method of a class inheriting from System.Web.Mvc.ControllerBase === on 11 Apr 2018, 18:00:11 Amaury Levé wrote: \[~alexandre.gigleux] I think that your comment should actually be part of the rule description because this is not clear when reading whether only ``++[System.Web.Mvc.ValidateInputAttribute(false)]++`` can cause issue.