How to handle LDAP password containing angle brackets in ASP.NET MVC application -
i have mvc3 application uses ldap authentication of internal users.
i have come across scenario in user has angle brackets in password, example my<special>password, valid password in ldap. when user tries log in application following exception thrown:
a potentially dangerous request.form value detected client which expect, not want in case.
i know decorate logon method [validateinput(false)] application allows external users register password of own choosing , still catch 'potentially dangerous' form fields.
is there more elegant solution using [validateinput(false)] attribute combined writing custom code check user's password?
you didn't post you're using model. if using model or convert simple model allow model binding, decorate password property [allowhtml] skip validation on property.
as alternative, maybe able use request.unvalidated().form["password"] give access unvalidated form data.
Comments
Post a Comment