Copied to clipboard

Flag this post as spam?

This post will be reported to the moderators as potential spam to be looked at


  • David Weil 2 posts 43 karma points
    Mar 05, 2020 @ 20:51
    David Weil
    0

    Backoffice on publish - A potentially dangerous Request.Form value

    We just upgraded from 8.4 to latest 8.5.4 via NuGet and now when publishing any page that has a RTE value the post fails with an: A potentially dangerous Request.Form value was detected from the client ?

    It works fine when no html is posted.

    Any ideas?

  • Alex Skrypnyk 5908 posts 22603 karma points MVP 4x admin c-trib
    Mar 05, 2020 @ 23:10
    Alex Skrypnyk
    0

    Hi David,

    Can you check the web.config file following lines:

    <system.web>
         <httpRuntime requestValidationMode="2.0" />
    

    What is the value of 'requestValidationMode' attribute?

    Thanks,

    Alex

  • David Weil 2 posts 43 karma points
    Mar 06, 2020 @ 14:30
    David Weil
    101

    Hi Alex,

    In our web.config the httpRuntime element did not have the 'requestValidationMode' set and that seemed to trigger the error. Setting it to '4.5' fixes the issue ;)

    <httpRuntime enableVersionHeader="false" maxRequestLength="51200" fcnMode="Single" requestValidationMode="4.5" />
    
  • This forum is in read-only mode while we transition to the new forum.

    You can continue this topic on the new forum by tapping the "Continue discussion" link below.

Please Sign in or register to post replies