I’m trying to solve a “A potentially dangerous Request.Form value was detected from the client” problem, and SO answers and Scott Hanselman recommend setting
<httpRuntime requestValidationMode="2.0" />
in Web.config (along with adding an attribute to problematic Methods).
I realize this changes the validation mode to ASP.NET 2.0’s, but what does that mean?
And also, does this change has any side effects I should be aware of?
Thanks.
Check out the description at MSDN’s HttpRuntimeSection.RequestValidationMode Property.