Are the conditions for increasing the "potentially dangerous Request.Form values" depending on the configuration and version of .NET?

Question

I am testing the Tiny_MCE plugin for BlogEngine.NET extension that I wrote earlier, and I keep getting the following error message whenever I use my own extension or the extremely popular SyntaxHighlighter extension that has the same behavior and both implement Tiny_MCE plugins:

URL: ' http: //localhost/admin/Pages/Add_entry.aspx '

Raw URL: /admin/Pages/Add_entry.aspx

Message: Potentially Hazard Request.Form value was detected from the client (Ctl00 $ cphAdmin $ txtContent $ TinyMCE1 $ txtContent = "

Source: System.WebStackTrace: at System.Web.HttpRequest.ValidateString (String value, String collectionKey, RequestValidationSource requestCollection) in System.Web.HttpRequest.ValidateNameValueCollection (NameValueCollection nvc, RequestValidationSourceCollection.getRequest.létem_RequestWolt_Request System.Web.HttpRequest.get_Item (String key) in BlogEngine.Core.Web.HttpModules.CompressionModule.context_PostReleaseRequestState (Sender Object, EventArgs e) in D: \ Projects \ Be-1610 \ BlogEngine \ DotNetSlave.BusinessLogicodules CompressionModule.cs: line 62 on the System.Web.HttpApplication.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute () in System.Web.HttpApplication.ExecuteStep (IExecutionStep step, Boolean & Synchronized: Vault TargetS. String, System.String, System.Web.Util.RequestValidationSource)

, : ( IIS 7.5 ASP.NET 4.0), (IIS 7.5 ASP.NET 3.5 SP1/3.0/2.0. ) , , Visual Studio 2010 , .

, , IIS localhost, , , ASP.NET 4.0, , . - , ?

Answer 1

, , - .NET 4.0. ASP.NET 4.0 .

, web.config:

<httpRuntime requestValidationMode="2.0" />

, !

Answer 2

, (, ) -, HTML javascript, , .

, ( , ?), .

:

<%@ Page Language="vb" ValidateRequest="false" [etc]

, web.config:

<system.web>
    <pages validateRequest="false" />
    [etc.]

Answer 3

TinyMCE , , . , . , @egrunin, .

Answer 4

This is mainly because the user could post some data in the form of an html tag, or miny-mce sends the data in html forms. Try looking for properties that return plain text from the editor. You can also try if it solves your problem.