Problems:
I am writing a simple message board, and I am also learning. I have encountered many problems.
In the client text box, enter "I first used the htmlencod encoded string: String STR = Str. server. htmlencod (STR); the problem still persists. I wrote another class to filter characters.
Filter z = z. lower (); Z = z. replace ("'", ""); Z = z. replace ("<", "*"); the problem persists,
A potentially dangerous request. form value is detected from the client (ctl00 $ contentplaceholder1 $ textboxcontent = "<SCRIPT> alert ('OK') <.
Analyze problems
The HTML Tag and <SCRIPT> are application-level. The error is thrown when the page has not been executed.
Problem Solving
Edit web. config and add <pages validaterequest = "false"/> to <system. Web>.
In this case, all your pages are not prompted with an error.
If you only want to verify that a single page is added to the page command of the page, validaterequest = "false "/
