Shulou(Shulou.com)06/01 Report--

Some website programs choose net2.0 home page access normal background operation to report net version error, select net4.0 home page access report net version error, but the background operation is normal

Modify the web.config configuration file of the website program

Two lines circled

When a user submits a form to the server on a page, the server detects some potential input risks, such as content edited with rich text editor controls (RichTextBox, FreeTextBox, CuteEditor, etc.) that contains HTML tags or script tags, and the ASP.NET page throws a "A potentially dangerous Request.Form value was deceted from the client" exception. This is a protection mechanism for ASP.NET pages against page injection. To remove this protection, it is common practice to add the ValidateRequest= "false" attribute to the .aspx file. But starting with .NET 4.0, you may need to modify one more place to add this line of configuration to the website's web.config file:

At the same time, you also need to make sure that the user-typed part of the page does not have any code that injects *. It is common practice to use Encode processing.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.