We receive an http post (not from a form) that has a parameter containing xml, like:
I've decoded for readability purposes:
This results in "A potentially dangerous Request.QueryString value was detected from the client"
I searched and found that I could use [ValidateInput(false)] to get around this.
Is this a security risk?
No comments:
Post a Comment