| 发表于：2007-03-16 15:31:40 楼主 |
一个页面上，有一个按钮，点击之后用ajax访问了一下db，根据结果，弹出一个页面。
hidajaxrtn是主画面上的一个hidden，用来放ajax画面写回的内容。
结果现在弹出后，主页面马上就会报错（弹出页面正常），错误如下：
a potentially dangerous request.form value was detected from the client （hidajaxrtn= "have <!doctype html publi... ").
description: request validation has detected a potentially dangerous client input value, and processing of the request has been aborted. this value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. you can disable request validation by setting validaterequest=false in the page directive or in the configuration section. however, it is strongly recommended that your application explicitly check all inputs in this case.
exception details: system.web.httprequestvalidationexception: a potentially dangerous request.form value was detected from the client （hidajaxrtn= "have <!doctype html publi... ").
source error:
an unhandled exception was generated during the ＥＸＥＣution of the current web request. information regarding the origin and location of the exception can be identified using the exception stack trace below.
stack trace:
[httprequestvalidationexception （0x80004005): a potentially dangerous request.form value was detected from the client （hidajaxrtn= "have
<!doctype html publi... ").]
system.web.httprequest.validatestring（string s, string valuename, string collectionname)
system.web.httprequest.validatenamevaluecollection（namevaluecollection nvc, string collectionname)
system.web.httprequest.get_form（) +113
system.web.ui.page.getcollectionbasedonmethod（)
system.web.ui.page.determinepostbackmode（)
system.web.ui.page.processrequestmain（)
system.web.ui.page.processrequest（)
system.web.ui.page.processrequest（httpcontext context)
system.web.callhandlerＥＸＥＣutionstep.system.web.httpapplication+iＥＸＥＣutionstep.ＥＸＥＣute（)
system.web.httpapplication.ＥＸＥＣutestep（iＥＸＥＣutionstep step, boolean& completedsynchronously) |
|
|
|
|
