http://blog.sina.com.cn/mibudai[订阅]
个人资料
分类
    内容读取中…
好友
读取中...
评论
读取中...
友情链接
访客
读取中...
博文
ASP.Net 1.1后引入了对提交表单自动检查是否存在XSS(跨站脚本攻击)的能力。当用户试图用之类的输入影响页面返回结果的时候,ASP.Net的引擎会引发一个 HttpRequestValidationExceptioin。默认情况下会返回如下文字的页面:

 

以下是引用片段:
Server Error in '/YourApplicationPath' Application

A potentially dangerous Request.Form value was detected from the client
(txtName='<b>').


Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate
<html xmlns='http://www.w3.org/1999/xhtml' >

<head runat='server'>
    <title>无标题页</title>

<script src='jquery.3.2.min.js' type='text/javascript'></script>

    <style type='text/css'>
 #reimg {
     margin:0 auto;
    width:410px;
    margin-top:200px;
}
#largeImages {
    height:250px;
    width:400px;
    display:block;
    margin-bottom:5px;
    padding:5px;
    border:1px #ccc solid;
}
.thumil_img {
    list-style:none;
    height:20px;
    margin-bottom:5px;
    width:20px;
    display:inline;
}