Write an HTML - possibly dangerous value Request.Form

Question

Write an HTML - possibly dangerous value Request.Form

Navigation

#1 by (1 votes)

1

I have a TextAreaFor that receives a content in Html, when trying to write I have an error, I added in web.config the pages validateRequest="false" I already tested the insert with plain text and it works, only with HTML it does not work

    [HttpPost]
    [ValidateInput(false)]
    public ActionResult GravarDados(tb_conteudo dadosTabela)
    {
        string titulocategoria = dadosTabela.CONT_TITULO;
        string tituloconteudo  = dadosTabela.CONT_TITULO;
        string conteudoHtml    = dadosTabela.CONT_HTML;

        //grava a categoria do conteúdo 
        var tcategoriaConteudo = new ConteudoCategoriaAplicacao();
        tcategoriaConteudo.GravaCategoriaConteudo(titulocategoria);

        //pega o id da categoria para gravar o conteúdo
        var tBuscarcategoriaConteudo = new ConteudoCategoriaAplicacao();
        var DadosCategoria = tcategoriaConteudo.BuscaIdCategoriaConteudo();
        int IdCategoria = Convert.ToInt16(DadosCategoria.COCA_PK_ID);

        //grava o conteúdo 
        var tConteudo = new ConteudoAplicacao();
        tConteudo.GravaConteudo(tituloconteudo, conteudoHtml, IdCategoria);

        return  RedirectToAction("index");
    }

error:

c# asp.net-mvc

asked by anonymous 05.06.2017 / 19:57

1 answer

taylor series in python without angle and margin of error Adding multiple GridView rows

score 1 · Accepted Answer

You need to add the [AllowHtml] annotation in the tb_conteudo property that is receiving the HTML content.

Example:

public class tb_conteudo
{
    [AllowHtml]
    public string CONT_HTML { get; set; }

    /* Outras propriedades */
}