Why Getting 'A Potentially Dangerous Request...' Error?

Discussion in 'ASP .Net' started by Anil Kripalani, Feb 25, 2004.

  1. When a user of our ASP.NET 1.1 application submits a form with the phrase
    'manuscript:' in a text field, ASP returns the error 'A potentially
    dangerous Request.Form value was detected from the client
    (182:BodyField="manuscript: hello").' Why is this seemingly innocent text
    triggering this error?

    Thanks,
    Krip
     
    Anil Kripalani, Feb 25, 2004
    #1
    1. Advertising

  2. Anil Kripalani

    Curt_C [MVP] Guest

    "...manuscript: ....."
    is similar to
    ".....javascript: ....."
    Thinks it's a javascript function
    --
    Curt Christianson
    Owner/Lead Developer, DF-Software
    www.Darkfalz.com


    "Anil Kripalani" <> wrote in message
    news:ubfFYS7%...
    > When a user of our ASP.NET 1.1 application submits a form with the phrase
    > 'manuscript:' in a text field, ASP returns the error 'A potentially
    > dangerous Request.Form value was detected from the client
    > (182:BodyField="manuscript: hello").' Why is this seemingly innocent text
    > triggering this error?
    >
    > Thanks,
    > Krip
    >
    >
     
    Curt_C [MVP], Feb 25, 2004
    #2
    1. Advertising

  3. To be clear-- there are quite a few protocol strings (javascript: vbscript:
    mocha: etc etc) which are supported by the universe of browsers. The HTML
    InputValidation routines are pretty broad in order to avoid missing things.

    --
    Thanks,

    Eric Lawrence
    Program Manager
    Assistance and Worldwide Services

    This posting is provided "AS IS" with no warranties, and confers no rights.


    "Curt_C [MVP]" <software_AT_darkfalz.com> wrote in message
    news:euMkp37#...
    > "...manuscript: ....."
    > is similar to
    > ".....javascript: ....."
    > Thinks it's a javascript function
    > --
    > Curt Christianson
    > Owner/Lead Developer, DF-Software
    > www.Darkfalz.com
    >
    >
    > "Anil Kripalani" <> wrote in message
    > news:ubfFYS7%...
    > > When a user of our ASP.NET 1.1 application submits a form with the

    phrase
    > > 'manuscript:' in a text field, ASP returns the error 'A potentially
    > > dangerous Request.Form value was detected from the client
    > > (182:BodyField="manuscript: hello").' Why is this seemingly innocent

    text
    > > triggering this error?
    > >
    > > Thanks,
    > > Krip
    > >
    > >

    >
    >
     
    Eric Lawrence [MSFT], Feb 25, 2004
    #3
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Alex Munk

    A potentially dangerous Request.Form

    Alex Munk, Dec 16, 2003, in forum: ASP .Net
    Replies:
    2
    Views:
    607
    Adrijan Josic
    Dec 17, 2003
  2. amit
    Replies:
    1
    Views:
    527
    Eric Lawrence [MSFT]
    Feb 26, 2004
  3. Mr. SweatyFinger
    Replies:
    2
    Views:
    2,268
    Smokey Grindel
    Dec 2, 2006
  4. Alex
    Replies:
    2
    Views:
    1,499
  5. Cesar Saucedo
    Replies:
    0
    Views:
    262
    Cesar Saucedo
    Jun 24, 2004
Loading...

Share This Page