ValidateRequest="false" issue

Jul 7, 2007 at 12:40 AM
Does anyone know any wa around turning off "validaterequest" when using the Fckeditor? The microsoft documentation seems to be strongly cautioning against it. Therefore, it makes me nervous.

What are the "real world" risks of this? I'd think that any editing tool one might include would need the validaterequest turned off in order to work...
Jul 7, 2007 at 1:47 AM
There is no way to use FCKEditor if ValidateRequest="true".

The reason they strongly recommend it is because of attacks where people parse in HTML into your database. The FCKEditor stuff is NOT public facing, so I wouldn't think that this is an issue.