从客户端(userName="

---

")中检测到有潜在危险的 Request.Form 值。怎么办呀?

aspx文件 config文件 controller里面都改为false了,还是不行.....

config文件

<?xml version="1.0"?>

<configuration>

  <system.web>

    <httpRuntime requestValidationMode="2.0"/>

    <httpHandlers>

      <add path="*" verb="*"

          type="System.Web.HttpNotFoundHandler"/>

    </httpHandlers>



    <!--

        Enabling request validation in view pages would cause validation to occur

        after the input has already been processed by the controller. By default

        MVC performs request validation before a controller processes the input.

        To change this behavior apply the ValidateInputAttribute to a

        controller or action.

    -->

    <pages

        validateRequest="false"

        pageParserFilterType="System.Web.Mvc.ViewTypeParserFilter, System.Web.Mvc, Version=2.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"

        pageBaseType="System.Web.Mvc.ViewPage, System.Web.Mvc, Version=2.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35"

        userControlBaseType="System.Web.Mvc.ViewUserControl, System.Web.Mvc, Version=2.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">

      <controls>

        <add assembly="System.Web.Mvc, Version=2.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" namespace="System.Web.Mvc" tagPrefix="mvc" />

      </controls>

    </pages>

  </system.web>



  <system.webServer>

    <validation validateIntegratedModeConfiguration="false"/>

    <handlers>

      <remove name="BlockViewHandler"/>

      <add name="BlockViewHandler" path="*" verb="*" preCondition="integratedMode" type="System.Web.HttpNotFoundHandler"/>

    </handlers>

  </system.webServer>

</configuration>

aspx文件

<%@ Page validateRequest="false" Title="" Language="C#" MasterPageFile="~/Views/shared/m1.Master" Inherits="System.Web.Mvc.ViewPage<dynamic>" %>


controller里面

[ValidateInput(false)]
public ActionResult message(string Class)
{