Export (0) Print
Expand All

HttpRequest.Unvalidated Property

.NET Framework 4.6 and 4.5

Gets the HTTP request values without triggering request validation.

Namespace:  System.Web
Assembly:  System.Web (in System.Web.dll)

public UnvalidatedRequestValues Unvalidated { get; }

Property Value

Type: System.Web.UnvalidatedRequestValues
The HTTP request values that have not been checked using request validation.

Request validation checks for HTML markup and script that might indicate a potential cross-site scripting attack. By default, all values are checked using request validation and if any values contain markup or script, ASP.NET throws an HttpRequestValidationException exception. Use this method if you anticipate that the request will contain markup (for example, you are allowing users to post content that contains markup) and you want to get the raw value of a request.

Security noteSecurity Note

If you use this property, you must manually check the data for potential cross-site scripting attacks.

.NET Framework

Supported in: 4.6, 4.5
Show:
© 2015 Microsoft