Welcome Guest Search | Active Topics | Sign In | Register

HttpRequestValidationException in .NET 4.0 Options
ww3467
Posted: Wednesday, July 20, 2011 9:56:26 AM
Rank: Member
Groups: Member

Joined: 10/1/2010
Posts: 10
I just upgraded from VS2008/.NET 3.5 to VS2010/.NET 4.0. I have a tree which is populated on demand and has checkboxes on each node. After converting, I have a problem when I expand a group node which has an apostrophe in the name. I receive the following error: Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (eo_cb_param="...9fc
Wendy's Events
18b2f...").

I can avoid the error by setting validateRequest = 'False' and adding <httpRuntime requestValidationMode="2.0" /> to the web.config, but I would rather not do that. Is there a fix for this?

Thanks!
eo_support
Posted: Wednesday, July 20, 2011 9:59:56 AM
Rank: Administration
Groups: Administration

Joined: 5/27/2007
Posts: 24,194
Hi,

We weren’t aware of this problem. We will look into it and get back to you as soon as possible.

Thanks!
eo_support
Posted: Wednesday, July 20, 2011 4:22:14 PM
Rank: Administration
Groups: Administration

Joined: 5/27/2007
Posts: 24,194
Hi,

We have not been able to reproduce this problem. Can you create a test page that demonstrates this problem? Please also let us know whether this problem occurs to all browsers or just certain browsers.

Thanks!
ww3467
Posted: Wednesday, July 20, 2011 4:35:17 PM
Rank: Member
Groups: Member

Joined: 10/1/2010
Posts: 10
I don't have a public server with .NET 4.0 right now, but note that when I populate the text for the group node I am using Server.HtmlEncode (e.g., Dim GroupNode As New EO.Web.TreeNode(Server.HtmlEncode(objEventSubGroup.Group_Name))). I have to do the Encode because of other characters which could be in the name. I noticed that .NET 4.0 is now encoding apostrophes, which previous versions didn't do. I think that is the cause of the problem. I will try to set up a server where I can put an example for you if that information doesn't help.

I have tried it in IE8, Firefox 4 and Chrome and it has happened in all of them.
eo_support
Posted: Wednesday, July 20, 2011 4:38:01 PM
Rank: Administration
Groups: Administration

Joined: 5/27/2007
Posts: 24,194
Hi,

Thanks for the additional information. We don't need it to be on your server. We need a test aspx page in source form so that we can run and debug it in our test environment.

Thanks!
ww3467
Posted: Thursday, July 21, 2011 9:21:22 AM
Rank: Member
Groups: Member

Joined: 10/1/2010
Posts: 10
Code for test page sent via PM
eo_support
Posted: Thursday, July 21, 2011 11:44:22 AM
Rank: Administration
Groups: Administration

Joined: 5/27/2007
Posts: 24,194
Hi,

Thanks for the test page. We have been able to reproduce and fix the problem. The fix will be in our next build. We will post again once that build is posted.

Thanks!
eo_support
Posted: Monday, August 1, 2011 10:38:59 AM
Rank: Administration
Groups: Administration

Joined: 5/27/2007
Posts: 24,194
Hi,

We have posted build 2011.0.18 that should fix this problem.

Thanks!


You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.