Sending HTML to Controller using Ajax POST

Question

I am trying to figure out why my Ajax query is not being sent to the controller when trying to send HTML data.

Using this simple POST to send the data:

        var contentFull = $("#contract").html();

        var url2 = '@Url.Action("SavePDF", "FRP")';
        $.ajax({
            url: url2,
            type: 'POST',
            contenttype: 'text/plain',
            async: true,
            data: {
                Content: contentFull
            },
            error: function (XMLHttpRequest, textStatus, errorThrown) {
                CustomAlert.render(XMLHttpRequest);
                CustomAlert.render(textStatus);
                CustomAlert.render(errorThrown);
                CustomAlert.render("Error while posting SendResult");
            },
            success: function (result) {
                CustomAlert.render("Yey?");
            }

        });

When changing contentFull to a simple string ("test"); the function SavePDF will activate and the content will be filled correctly. When using the POST as is; the succes function will fire off, but the SavePDF function is completely ignored.

I've been looking like crazy figuring out what the reason could be. First thought was the character limit issue which should be solved by using POST.

Open your browser console. I'm pretty sure there will be errors there. — emerson.marini
– emerson.marini, Commented May 25, 2016 at 8:06
Have been checking; no output while running the ajax post EDIT: I have been testing with IE 11 though, will test on Chrome — NoxBene
– NoxBene, Commented May 25, 2016 at 8:07
This might be helpful: Post HTML tag (codes) as string with ASP.net MVC & JQuery — emerson.marini
– emerson.marini, Commented May 25, 2016 at 8:09

NoxBene · Accepted Answer · 2016-05-25 09:45:48Z

2

Answer found below! https://www.owasp.org/index.php/ASP.NET_Request_Validation

Asp.net request validation ignored my request because of security XSS issues. By using the tag [ValidateInput(false)] in my MVC Controller; the function works as expected!

answered May 25, 2016 at 9:45

NoxBene

941 silver badge12 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Yanaro · Accepted Answer · 2016-05-25 08:14:14Z

1

Since i still can't comment, i'll use answering function instead. I don't think you need to specify contenttype and async, async is true by default, contenttype text/plain will not allow you to send html content.

var contentFull = $("#contract").html();

        var url2 = '@Url.Action("SavePDF", "FRP")';
        $.ajax({
            url: url2,
            type: 'POST',
            data: {
                Content: contentFull
            },
            error: function (XMLHttpRequest, textStatus, errorThrown) {
                CustomAlert.render(XMLHttpRequest);
                CustomAlert.render(textStatus);
                CustomAlert.render(errorThrown);
                CustomAlert.render("Error while posting SendResult");
            },
            success: function (result) {
                CustomAlert.render("Yey?");
            }

        });

answered May 25, 2016 at 8:14

Yanaro

3454 silver badges16 bronze badges

7 Comments

NoxBene Over a year ago

Same error as I have been having before.. Sending normal text in contentFull works perfectly; having a bunch of HTML in there (in string format), doesn't

Jacky Shek Over a year ago

what framework you use? some framework will filter XSS when user post string. so please check your framework that does it be filtered. Sometimes there are some WAF will filter XSS as well.

Jacky Shek Over a year ago

I have updated my comment at above.you should turn xss protection off and try. owasp.org/index.php/ASP.NET_Request_Validation

NoxBene Over a year ago

@user2352577L THIS!! gives me a lot of hope! Thank you, I will check this out!

NoxBene Over a year ago

DING DING DING!! Correct answer!! Thank you so much @user2352577L

|

emerson.marini · Accepted Answer · 2016-05-25 08:13:36Z

0

var contentFull = $("#contract").html();
var url2 = '@Url.Action("SavePDF", "FRP")';

$.ajax({
    url: url2,
    type: 'POST',
    async: true,
    data: {
        Content: contentFull
    },
    error: function (XMLHttpRequest, textStatus, errorThrown) {
        CustomAlert.render(XMLHttpRequest);
        CustomAlert.render(textStatus);
        CustomAlert.render(errorThrown);
        CustomAlert.render("Error while posting SendResult");
    },
    success: function (result) {
        CustomAlert.render("Yey?");
    }
});

edited May 25, 2016 at 8:13

emerson.marini

9,3462 gold badges35 silver badges50 bronze badges

answered May 25, 2016 at 8:11

Dhruti

372 silver badges10 bronze badges

2 Comments

Dhruti Over a year ago

This will work fine. you were added contenttype: 'text/plain', so it will accepts on only text.

NoxBene Over a year ago

Will try this now; As far as I remember; this is the function I originally started from EDIT: Same problem here; changing Content: "Test" works perfectly; having contentFull there does not fire SavePDF in the controller

Collectives™ on Stack Overflow

Sending HTML to Controller using Ajax POST

3 Answers 3

Comments

7 Comments

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

7 Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related