validateRequest=“假”即使使用 requestValidationMode="2.0" 也无法正常工作

发布于 2024-12-09 23:18:44 字数 548 浏览 0 评论 0 原文

我有一个在 Visual Studio dev-fabric（azure 项目）中运行的 ASP.NET 网站，并且正在使用 ACS 和 WIF。我的身份验证过程不起作用，因为登录后我得到以下信息：

A potentially dangerous Request.Form value was detected from the client (wresult="<t:RequestSecurityTo...").

文档指出我需要添加

<pages validateRequest="false" />

并且

<httpRuntime requestValidationMode="2.0" />

我做了 - 但我仍然收到错误。我还在页面级别添加了 validateRequest="false" 。但nada - 仍然遇到同样的错误。

这些步骤似乎已经解决了其他海报的问题 - 这可能与在 dev-fabric 中运行有关吗？

原文

I have an ASP.NET Web Site running in Visual Studio dev-fabric (azure project) and am using ACS and WIF. My authentication process isn't working because after I login I get this:

A potentially dangerous Request.Form value was detected from the client (wresult="<t:RequestSecurityTo...").

The documentation states that I need to add

<pages validateRequest="false" />

and

<httpRuntime requestValidationMode="2.0" />

And I did - but I'm still getting the error. I've also added validateRequest="false" at the page level. But nada - still getting the same error.

These steps seem to have fixed the issue for other posters - is it something to do with running in dev-fabric perhaps?

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

睫毛溺水了 2024-12-16 23:18:44

我没有意识到，但我不小心在 WIF 创建的位置标签中添加了这些设置：

  <location path="FederationMetadata">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
      <!-- wrong! -->
    </system.web>
  </location>
  <system.web>
      <!-- right! -->
    <httpRuntime requestValidationMode="2.0" />
    <pages validateRequest="false" />

I hadn't realised, but I'd accidentally added these settings within a location tag created by WIF:

  <location path="FederationMetadata">
    <system.web>
      <authorization>
        <allow users="*" />
      </authorization>
      <!-- wrong! -->
    </system.web>
  </location>
  <system.web>
      <!-- right! -->
    <httpRuntime requestValidationMode="2.0" />
    <pages validateRequest="false" />

回复收藏 0 原文

~没有更多了~