Alexander wrote:
> So the problem is that Asp.Net not acept string like "<sometext>" as
> paramters.
What exactly happens? Do you get a HttpRequestValidationException
exception? In that case the documentation
http://msdn.microsoft.com/en-us/libr...exception.aspx
suggests you have some options to avoid that:
"Request validation detects potentially malicious client input and
throws this exception to abort processing of the request. A request
abort can indicate an attempt to compromise the security of your
application, such as a cross-site scripting attack. It is strongly
recommended that your application explicitly check all input regarding
request aborts. However, you can disable request validation by setting
the validateRequest attribute in the @ Page directive to false, as shown
in the following example:
<%@ Page validateRequest="false" %>
To disable request validation for your application, you must modify or
create a Web.config file for your application and set the
validateRequest attribute of the pages section to false, as shown in the
following example:
<configuration>
<system.web>
<pages validateRequest="false" />
</system.web>
</configuration>
"
--
Martin Honnen --- MVP XML
http://msmvps.com/blogs/martin_honnen/