A potentially dangerous Request.Path value was detected from the client (<) asp.net 4.8

Question

[HttpException (0x80004005): Valore potenzialmente pericoloso Request.Path rilevato dal client (<).]
System.Web.HttpRequest.ValidateInputIfRequiredByConfig() +11790525
System.Web.HttpApplication.ExecuteStepImpl(IExecutionStep step) +75
System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +158

i've in my web.config:
<pages enableSessionState="true" validateRequest="false"

and in my page directive:
ValidateRequest="false"

any ideas?

Answer 1

Try add <httpRuntime requestValidationMode="2.0" /> at system.web section

validaterequest-false-doesnt-work-in-asp-net-4
Solved-ValidateRequest-false-not-working-in-Net-40-and-45-in-ASPNet.aspx

Answer 2

Hi @Asap74 ,
As far as I think,you are not only add ValidateRequest="false" and requestValidationMode="2.0", but also you need to convert the string to its HTML encoding equivalent(so "<" is converted to "<", etc).Please use HttpUtility.HtmlEncode. You could refer this article.

Best regards,
Yijing Sun

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.