problem with posting data

Dec 8, 2010 at 9:02 AM

Hi all.

I am implementing this as part of an MVC2 project and was wondering if anyone knew any ways of getting past the posting of tagged data?  I know you can put [ValidateInput(false)] on the HttpPost action but this opens the rest of the page to script attack.  Any ideas?

Only solution I can think of is to place the html editor inside an AJAX panel and post that seperatly with the [ValidateInput(false)] statement on the controler for that AJAX panels HttpPost action...

Oct 19, 2011 at 1:54 AM

[ValidateInput(false)] seems the popular choice for MVC2.  If switching to MVC3 is an option though, you can use the [AllowHtml] attribute.