asp.net 4.8從客戶端檢測(cè)到有潛在危險(xiǎn)的 Request.Form 值
廣告：
環(huán)境：asp.net 4.8 asp.net mvc 5.27
“/”應(yīng)用程序中的服務(wù)器錯(cuò)誤。
從客戶端(ctl00$ContentPlaceHolder1$content_txt$txtContent="<p>ccvcvcv</p>")中檢測(cè)到有潛在危險(xiǎn)的 Request.Form 值。
說(shuō)明: ASP.NET 在請(qǐng)求中檢測(cè)到包含潛在危險(xiǎn)的數(shù)據(jù)，因?yàn)樗赡馨?HTML 標(biāo)記或腳本。該數(shù)據(jù)可能表示存在危及應(yīng)用程序安全的嘗試，如跨站點(diǎn)腳本攻擊。如果此類型的輸入適用于您的應(yīng)用程序，則可包括明確允許的網(wǎng)頁(yè)中的代碼。有關(guān)詳細(xì)信息，請(qǐng)參閱 http://go.microsoft.com/fwlink/?LinkID=212874。
異常詳細(xì)信息: System.Web.HttpRequestValidationException: 從客戶端(ctl00$ContentPlaceHolder1$content_txt$txtContent="<p>ccvcvcv</p>")中檢測(cè)到有潛在危險(xiǎn)的 Request.Form 值。
源錯(cuò)誤:
[沒有相關(guān)的源行]
源文件: c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\vs\c7f3f126\afa00efa\App_Web_t3mq1nne.19.cs 行: 0
堆棧跟蹤:
[HttpRequestValidationException (0x80004005): 從客戶端(ctl00$ContentPlaceHolder1$content_txt$txtContent="<p>ccvcvcv</p>")中檢測(cè)到有潛在危險(xiǎn)的 Request.Form 值。]
System.Web.HttpRequest.ValidateString(String value, String collectionKey, RequestValidationSource requestCollection) +11779120
System.Web.HttpRequest.ValidateHttpValueCollection(HttpValueCollection collection, RequestValidationSource requestCollection) +204
System.Web.HttpRequest.get_Form() +61
System.Web.HttpRequest.get_HasForm() +11786696
System.Web.UI.Page.GetCollectionBasedOnMethod(Boolean dontReturnNull) +109
System.Web.UI.Page.DeterminePostBackMode() +87
System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +9318
System.Web.UI.Page.ProcessRequest(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +355
System.Web.UI.Page.ProcessRequest() +79
System.Web.UI.Page.ProcessRequest(HttpContext context) +74
ASP.admin_newsadd_aspx.ProcessRequest(HttpContext context) in c:\Windows\Microsoft.NET\Framework64\v4.0.30319\Temporary ASP.NET Files\vs\c7f3f126\afa00efa\App_Web_t3mq1nne.19.cs:0
System.Web.CallHandlerExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +542
System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step) +75
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +93
解決辦法：requestValidationMode="2.0"
<!--兼容asp.net 2.0 <httpRuntime requestValidationMode="2.0" requestPathInvalidCharacters="" /> -->
廣告：
