Exception occurred when input data has html code

[TWCM]

Hi @thepirat000
I got an error when the request form data has html code, the Audit.Mvc.AuditAttribute class method private static IDictionary<string, string> ToDictionary(NameValueCollection col) occur an exception "System.Web.HttpRequestValidationException: 'A potentially dangerous Request.Form value was detected from the client (Html="
").'" , would you help to check this issue?
Below image for your reference.

[thepirat000]

This is not related to Audit.NET, that's an ASP.NET exception that will be thrown by default whenever you try to access a form value that contains unencoded HTML.
Since you are passing unencoded HTML, when the Audit.NET library tries to access the form value, the exception is thrown.

You can explicitly avoid the exception. For example adding the attribute [ValidateInput(false)] to your controller action, take a look at http://stackoverflow.com/questions/81991/a-potentially-dangerous-request-form-value-was-detected-from-the-client

[TWCM]

Here is the code of controller. added the ValidateInput(false) attribute, but still throw exception .

[thepirat000]

oh ok, let me try to reproduce it here

[thepirat000]

You were right, sorry.

I've made a change on the library so the validations will not be triggered by the Audit form values retrieval.

Please upgrade to latest version (>= 7.0.2) and let me know if you still have problems.

Regards