Home/ Questions/Q 160681
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-11T11:04:42+00:00

I just want to know how to validate (or clean) user input in ASP.NET

  • 0

I just want to know how to validate (or clean) user input in ASP.NET MVC so that an HttpRequestValidationException will not be thrown regardless of the values submitted. For example, with a text input, if the user inputs <BR/>, it will cause an exception and the Yellow Screen of Death will be shown. I don’t want that. I want to catch the exception and to make visible an user friendly error in the current view, preferably with the controls loaded with the same values submitted.

I have found this http://www.romsteady.net/blog/2007/06/how-to-catch-httprequestvalidationexcep.html, but it is useless for my purpose. Also, I have found this http://msdn.microsoft.com/en-us/library/aa973813.aspx and tried to put inside a model binder but I couldn’t make to work.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. With the latest version of ASP.NET MVC (the RC, at the time of writing this) you can just put an attribute on either your controller class or your action method, e.g.:

    [ValidateInput(false)] public ActionResult create() {     // ...method body }

    The ValidateInputAttribute is in System.Web.Mvc.

    But as others have said, you do then have to perform your own manual input validation or cleaning.

    Using MVC 3, you must also ensure this is in your Web.config: <system.web><httpRuntime requestValidationMode='2.0' /></system.web>

    • 0