Sending input string field value to action controller

Question

I have a field in my view, called Comments and every time I include the < in before any other character(letters, etc) in the 'input', the action controller is not being called, I think is because is not being able to parse correctly to string,

This is how the property in my class is declared:

 [Display(Name = "Comments"), DataType(DataType.MultilineText)]
 public string my_comments { get; set; }

It works fine when I enter any word, for example:

dog, [email protected], >asa?

But if I try something like:

<[email protected]>, <p, <asa>, asasd<f

the action is not being called and I think is because this is not being able to parse the input to an string...

If I include the < character at the end, no problem it pass.., for example:

ddd<

I'm using JQuery in my view:

  $("#btnSubmit").click(function () {  
 $.ajax({
                type: 'post',
                url: $("#btnSubmit").data("url"),
                data: $("#formEd").serialize(),              
                success: function (result) {
....
}})
})

Html:

 <div class="form-group">
        <div class="control-label col-md-2">Comments</div>
        <div class="col-md-5">
            @Html.EditorFor(model => model.my_comments , new { htmlAttributes = new { @class = "form-control" } })
            @Html.ValidationMessageFor(model => model.my_comments , "", new { @class = "text-danger" })
        </div>
    </div>

And my action controller:

[HTTPPost]
public ActionResult MyAction(MyClass parameter) // where MyClass contains the my_comments property...

COLD TOLD · Accepted Answer · 2017-10-20 16:28:17Z

1

You can add an attribute to disable the input validation, but you have to make sure you are certain you want to allow html.

[ValidateInput(false)]
[HTTPPost]
public ActionResult MyAction(MyClass parameter)

you can also add the attribute to your variable to allow have html.

 [Display(Name = "Comments"), DataType(DataType.MultilineText)]
 [AllowHtml]
 public string my_comments { get; set; }

answered Oct 20, 2017 at 16:28

COLD TOLD

13.6k3 gold badges37 silver badges53 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

AlexGH Over a year ago

It worked, I will select your answer as soon as the required minutes to select it goes, one question: why the input validation doesn't allow the < character before any other character in this case?

COLD TOLD Over a year ago

because it think it might be html or script, and for security reasons does not allow it to be sent in post.

Collectives™ on Stack Overflow

Sending input string field value to action controller

1 Answer 1

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related