Question

A potentially dangerous Request.Form value was detected from the client (Body="<b></b>").

This error is occurring when I try to enter something like <b></b> in my comments field and send it. I’ve searched and only thing I find is to disable validation for dangerous data altogether, but I don’t want to disable it since then my site will be vulnerable.
What I want is to encode it before sending or something along these lines so it will send the data, just encoded.

Answer 1

If you’re using .net 4 you can decorate your model with [AllowHtml] which will let just that specific property through. You can then sanitize it in the controller logic.

public class MyViewModel
{
    public string prop1 { get; set; }

    [AllowHtml]
    public string prop2 { get; set; }
}