ERRMSG: A potentially dangerous Request.Form value was detected

When creating new articles within InstantKB.NET or posting new topics within InstantForum.NET you may receive the following error message. "A potentially dangerous Request.Form value was detected from the client".

This is a standard ASP.NET security feature called request validation. You can read more on this here…
http://www.asp.net/learn/whitepapers/request-validation

Whilst we do already set requestValidation to false by default within both the InstantForum.NET & InstantKB.NET web.config it could be you encounter this error if you've modified the web.config are are using an alternative web.config.

Resolution

You need to disable requestValidation from within the web.config file. We provide our own protection for all user input against XSS or SQL injection attacks.

Please ensure the validateRequest attribute is present within your <pages/> element and is set to false…

<pages validateRequest="false" />

ASP.NET 4.0

For ASP.NET 4.0 installations you'll need to add the following to your web.config...

<httpRuntime requestValidationMode="2.0" />

See this whitepaper for more information.

That's It!

I hope this information helps. As always if you have any questions please don't hesitate to contact us.