hhh3112
Reputation: 2187
Submitting html code without setting ValidateRequest to false
I have a textbox and i want the user to be able to submit a youtube embed code. Is this possible without setting 'ValidateRequest' to false?
Upvotes: 1
Views: 1155
Answers (2)
Magnus
Reputation: 46977
Html encode the text and put it in a hidden input before submit, and then decode it on the server after submit.
Upvotes: 1
Adeel
Reputation: 19228
No, you must turn it False to allow users to enter youtube embed code. you just have to encode your code to prevent cross site scripting.
Upvotes: 2
Related Questions
- Alternative to ValidateRequest="false"
- HTML form submitting ASP.NET 4.0
- Asp.Net 4.0 MVC 3: Post html code
- Removing request validation from page
- Allowing HTML text in asp textbox w/o using validateRequest=false
- Allow for "<<" to be submitted, without disabling "validaterequest"
- ASP.Net - A potentially dangerous Request from submitting HTML data
- How to post a purely HTML form via ASP.NET
- Posting text with html tags without changing the requestValidationMode?
- ValidateRequest="false" doesn't work when posting HTML values