How to handle ASP.NET MVC3 Request Validation exceptions as model or property validation errors

Question

My question is hopefully pretty straight forward. Upon submitting my form, I would like to flag all properties (fields) that have invalid characters (specifically HTML) as model errors. The issue I am facing is that Request Validation kicks in before model binding/validation and I get HTTP 500... I saw a similar question that advertises either using [AllowHtml] property attribute on your Model/ViewModel or using <httpRuntime requestValidationMode="2.0" /> in web.config, but what I am looking for is how to "globally catch Request Validation exceptions and show them as model errors". Furthermore, I don't want to "strip" HTML tags, I want to notify the user that their input is not valid.

I thought about using Regular Expression validation attributes to find bad input, but as I mentioned, the Request Validation on ASP.NET MVC3 occurs before model binding/validation, so that is a no-go...

A really good overview of the Request Validation can be found here.

Let me understand your problem. You want to flag your properties in code-behind and manipulate them in code-behind when there are any validation error? — Vinicius Ottoni
– Vinicius Ottoni, Commented Feb 13, 2012 at 15:04

avs099 · Accepted Answer · 2014-05-26 15:33:42Z

10

I think your only intention is to get the Request Validation exception during model binding and show the errors as model state error. Here is the sample,

    using System.Web.Helpers;
    public class MyModelBinder : DefaultModelBinder
    {
        public override object BindModel(ControllerContext controllerContext, ModelBindingContext bindingContext)
        {
            try
            {
                return base.BindModel(controllerContext, bindingContext);
            }
            catch(HttpRequestValidationException ex)
            {
                var modelState = new ModelState();
                modelState.Errors.Add(ex.Message);
                var key=bindingContext.ModelName;
                var value = controllerContext.RequestContext.HttpContext.Request.Unvalidated().Form[key];
                modelState.Value = new ValueProviderResult(value, value,CultureInfo.InvariantCulture);
                bindingContext.ModelState.Add(key, modelState);
            }
            return null;
        }
    }

    protected void Application_Start()
    {
        AreaRegistration.RegisterAllAreas();
        ModelBinders.Binders.DefaultBinder = new MyModelBinder();
    }

This will add the exception of only request validation in model state. Sorry, If I don't understand your question clearly.

edited May 26, 2014 at 15:33

avs099

11.2k6 gold badges66 silver badges112 bronze badges

answered Feb 13, 2012 at 17:14

imran_ku07

1,40412 silver badges13 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

imran_ku07 Over a year ago

@zam6ak, Add using System.Web.Helpers and see my updated answer. Note, this is just a quick answer and not very much optimized. Sorry for that.

zam6ak Over a year ago

This seems to work nicely - I am not sure why are you saying it is "not very much optimized" :)

imran_ku07 Over a year ago

@zam6ak, I said this because I have created this in a quick time. So, it may be not optimized or there may be some other better way.

kdawg Over a year ago

For everyone's info, Unvalidated() is new on Request as of .NET 4.5

Chris Miller Over a year ago

When using a custom DefaultBinder like in this example, is there any way of getting the display name of the field set in bindingContext.ModelName?

|

Collectives™ on Stack Overflow

How to handle ASP.NET MVC3 Request Validation exceptions as model or property validation errors

1 Answer 1

7 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

7 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related