Event Validation

Question

User-153404742 posted

Is there a list of HTML characters that would cause an EventValidation error?  i.e. the < and > symbols if used in textbox on a page that has the EventValidation set to true will cause an error but is there a list of other characters that would cause this?

Answer 1

User753101303 posted

Hi,

From what I see, I believe the default implementation comes from https://referencesource.microsoft.com/#System.Web/CrossSiteScriptingValidation.cs,3c599cea73c5293b

Seems they are looking for < following by ! or  a letter or & followed by #

Or be explicit, rhis is request validation, event validation does exists but it something else.