Link to home
Start Free TrialLog in
Avatar of GouthamAnand
GouthamAnand

asked on

Due to the presence of characters known to be used in Cross Site Scripting attacks, access is forbidden. This web site does not allow Urls which might include embedded HTML tags.

I am working on a web application.
After entering the data in all the text boxes and pressed the submit button, I got the below error.

"Due to the presence of characters known to be used in Cross Site Scripting attacks, access is forbidden. This web site does not allow Urls which might include embedded HTML tags. "

Can anyone help me why I am getting this error and what is the solution for this.
ASKER CERTIFIED SOLUTION
Avatar of jaydee-cdgp
jaydee-cdgp
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of tillgeffken
tillgeffken

ASP.NET is trying to help in making sure the user is not trying to make a
cross site scripting attack no your site. It is checked the first time you
access Request.Form or Request.QueryString collection.

If you insist you can disable it with the validateRequest setting:

http://msdn.microsoft.com/en-us/library/950xf363.aspx

If you do this it will be crucial that you validate any input data to
insure the user is not sending you malicious input.

Forgot to mention that i recommend not to change the setting. What does your form input look like?
Avatar of GouthamAnand

ASKER

Thank you