I am using ASP.NET MVC 3 with .NET 4.0. I have a model on which one of the properties requires that HTML content be allowed. I have placed the AllowHtml
attribute on my model property which allows HTML on that property. That works by itself.
I am also using the Uploadify flash uploader on other parts of my website. Due to problems with flash and sessions, I'm using some code similar to the code in a swfupload example to allow my file upload access to session data. Basically I'm accessing the Request.Form
collection directly in the Application_BeginRequest
handler.
The problem I'm running into is that when the form that allows HTML is posed I get a HttpRequestValidationException
when the code in the Application_BeginRequest
handler access the Request.Forms[key]
collection.
Like I said in the beginning, I've tried the AllowHtml
attribute. I've also tried disabling validation at the action and controller level using the ValidateInput(false)
attribute, but I believe I'm too early in the request life cycle for those to apply. Is there anyway to access the Request.Form
collection containing "potentially dangerous" data without disabling request validation for the entire site?