ASP.NET - Potentially dangerous Request.Form value detected

Question

On a Windows 2008 web server, I get the following error when submitting a form with html tags in text fields:

A potentially dangerous Request.Form value was detected from the client (widget $ txtText = "

This is a common mistake, and you correct it either using the ValidateRequest = false page or in the web.config file with the validaterequest = false pages. However, on this particular server, it completely ignores validaterequest = false and throws this exception anyway. Has anyone seen this behavior before and knows what else I can do to prevent this error? I saw this in two web applications now on the same server, this is really strange.

Thanks Justin

Answer 1

I don't know about 3.5, but to fix it in 4.0, use

<httpRuntime requestValidationMode="2.0" />

in your web.config and set the page directive as you said in your question.

Answer 2

What version of .NET are you using? Page validation works a little differently in .NET 4.