如何跳過MVC中的ValidateRequest驗證

MVC中客戶端傳值到服務器端時，如果客戶端字符串含有“</>”字樣時就會報“檢測到有潛在危險”的錯誤。

如：從客戶端(“test<br/>ttt”)中檢測到有潛在危險的 Request.Form 值。

解決辦法：在對應的ActionResult 前面加上[ValidateInput(false)]就可以解決，去除驗證。

下面是一個富文本的頁面源碼示例:

<%@ Page Language=”C#” MasterPageFile=”~/Views/Shared/Site.Master” Inherits=”System.Web.Mvc.ViewPage<SNDA.SPM.Web.Models.NewsModel>” %>

<%@ Register Assembly=”FredCK.FCKeditorV2″ Namespace=”FredCK.FCKeditorV2″ TagPrefix=”FCKeditorV2″ %>

<asp:Content ID=”Content2″ ContentPlaceHolderID=”head” runat=”server”>

<h2>UPS后臺管理</h2>

<script src=”../../Scripts/jqui/jquery-1.4.2.js” type=”text/javascript”></script>

<script src=”../../Scripts/fckeditor.js” type=”text/javascript”></script>

<script src=”../../Scripts/jquery.validate.js” type=”text/javascript”></script>

</asp:Content>

<asp:Content ID=”Content1″ ContentPlaceHolderID=”MainContent” runat=”server”>

<script type=”text/javascript” language=”javascript”>

$(document).ready(function() {

var oFCKeditor = new FCKeditor(‘Content’);

oFCKeditor.ToolbarSet = “Wiki”;

oFCKeditor.ReplaceTextarea();

$(document.forms.item(0)).validate({

errorClass: “error”,

rules:

{

Title: “required”,

Content: “required”

},

messages:

{

Title: “*請輸入新聞標題“,

Content: “*請輸入新聞正文“

}

});

});

</script>

<p title=”軟件包名“ style=”margin:10px 10px;“>

<table width=”100%” border=”0″ id=”elButton1″>

<tr>

<td width=”10%”>軟件包名</td>

<td align=”left” style=”font-size:20px;font-weight:bold;“><%= Model.name%></td>

</tr>

<tr title=”新聞標題“>

<td>新聞標題</td>

<td>

<input type=”text” name=”Title” />

</td>

</tr>

<tr><td colspan=”2″>正文</td></tr>

<tr title=”正文“>

<td colspan=”2″>

<textarea name=”Content” id=”Content” cols=”60″ rows=”6″></textarea>

</td>

</tr>

<tr title=”Buttons” style=”height:34px;“>

<td valign=”bottom” align=”right”><input type=”submit” style=”width:80px;height:25px;“ value=”發布“ /></td>

<td>

<%= Html.ActionLink(” “, “Index”, new { id = Model.sid })%>

</td>

</tr>

</table>

</p>

</asp:Content>