Question

I’m using ASP.NET MVC.

How can I allow users to enter HTML into a textbox?
I’m seting validaterequest to false and still getting this error:

A potentially dangerous Request.Form value was detected from the client (Summary=”<a>“).

I know its not recommended etc, but it’s for internal use.

Answer 1

Add the ValidateInput(false) attribute to your action

[ValidateInput(false)]
public ActionResult MyAction (int id, string content) {
}