Programming skills(编程技巧)|请慎用ASP.Net的validateRequest=“false”_.net资料_编程技术 comment--uuhomepage|你的首页|www.uuhomepage.com

		请慎用ASP.Net的validateRequest=“false”_.net资料_编程技术

Writer:	aaa	Article type:	Programming skills(编程技巧)	Time:	2013/12/17 8:04:10	Browse times:	339	Comment times:	0

请慎用ASP.Net的validateRequest=“false”_.net资料_编程技术

Head photo

Go homepage

Upload pictures

Write articles

请慎用ASP.Net的validateRequest=“false”_.net资料_编程技术-你的首页-uuhomepage.com

　　ASP.Net 1.1后引入了对提交表单自动检查是否存在XSS(跨站脚本攻击)的能力。当用户试图用之类的输入影响页面返回结果的时候，ASP.Net的引擎会引发一个 HttpRequestValidationExceptioin。默认情况下会返回如下文字的页面：

Server Error in '/YourApplicationPath' Application

A potentially dangerous Request.Form value was detected from the client
(txtName="").

Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. You can disable request validation by setting validateRequest=false in the Page directive or in the configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case.

Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (txtName="").

....

Comment:
Must be registered users to comment(必须是注册用户才能发表评论)