Question

I need to be able to allow the “+” sign for certain actions in a controller. I am building a tag filtering engine that allows something like this (ie. stackoverflow) : /Stuff/Tagged/tag-name-1+tag-name-2+other-tag

I know I can set allowDoubleEscaping="true" in the web.config, but it is not best practices for security reasons.

I am guessing there is a way using maybe a custom filer or some other registry in the global.asax?

Answer 1

StackOverflow is probably treating the + as a whitespace. Most likely they map the route /Stuff/Tagged/{*tags} and call string.split() on the tags. This actually works out great if you don’t allow whitespace in your tags.