What characters am I allowed to use when submitting fields?

Discussion in 'ASP .Net' started by Nathan Sokalski, Jul 23, 2008.

  1. When signing in using the following generated password:

    +$cSB;!"q<y^I recieve the following error:A potentially dangerous Request.Form value was detected from the client (ctl00$cphContent$txtPassword="+$cSB;!"q<y^").System.Web.HttpRequestValidationException


    What characters am I allowed to include in a value that will be generated and submitted in a TextBox? When I generate something simple (such as "testing" or "abc123") it gets submitted with no problem at all, so I need to know what characters will cause this problem so that I can modify my function for generating the String. Can anyone help me? Thanks.
     
    Nathan Sokalski, Jul 23, 2008
    #1
    1. Advertisements

  2. Nathan Sokalski

    bruce barker Guest

    depends on if you have validate request on (default). if you do then
    asp.net is checking for injection attacks. ms does not document the list
    but it "<" & "&#" combinations (probably also quotes). the list gets
    updated as new attacks are found.


    -- bruce (sqlwork.com)


    Nathan Sokalski wrote:
    > When signing in using the following generated password:
    >
    >
    > +$cSB;!"q<y^
    >
    > I recieve the following error:
    >
    > /A potentially dangerous Request.Form value was detected from the client (ctl00$cphContent$txtPassword="+$cSB;!"q<y^")./
    >
    > System.Web.HttpRequestValidationException
    >
    >
    > What characters am I allowed to include in a value that will be
    > generated and submitted in a TextBox? When I generate something simple
    > (such as "testing" or "abc123") it gets submitted with no problem at
    > all, so I need to know what characters will cause this problem so that I
    > can modify my function for generating the String. Can anyone help me?
    > Thanks.
     
    bruce barker, Jul 24, 2008
    #2
    1. Advertisements

  3. Nathan Sokalski

    Lalit Guest

    Hi,

    Your probleme is "< " characters. Please check it.

    Thanks lalit
     
    Lalit, Jul 28, 2008
    #3
    1. Advertisements

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Jake Barnes
    Replies:
    5
    Views:
    1,017
    xmlBlueprint Team
    Dec 21, 2005
  2. Abandoned

    Delete all not allowed characters..

    Abandoned, Oct 25, 2007, in forum: Python
    Replies:
    10
    Views:
    723
    Zentrader
    Oct 26, 2007
  3. Bouton Jones
    Replies:
    0
    Views:
    1,428
    Bouton Jones
    Jan 6, 2009
  4. Ken Sturgeon
    Replies:
    1
    Views:
    374
    Dominick Baier
    Jun 11, 2007
  5. Nathan Sokalski

    What characters am I allowed to use when submitting fields?

    Nathan Sokalski, Jul 23, 2008, in forum: ASP .Net Security
    Replies:
    2
    Views:
    341
    Lalit
    Jul 28, 2008
  6. Iñaki Baz Castillo
    Replies:
    13
    Views:
    747
    Iñaki Baz Castillo
    May 1, 2011
  7. Replies:
    3
    Views:
    278
    Ted Zlatanov
    Oct 22, 2007
  8. -Nacho-

    fields merging prior to form submitting

    -Nacho-, Jun 18, 2006, in forum: Javascript
    Replies:
    7
    Views:
    217
    Randy Webb
    Jun 19, 2006
Loading...