how to restrict html tags in query string in mvc

Question

how to handle request when user directly enters html content in URL. I want to redirect to Error page when user enters html tag in URL is that possible in MVC.

I have tried from BeginExecute event of by creating override method.

Please give some suggestion.

Thanks.

Any sample code available to reproduce? Can you provide examples of forbidden query string URLs that you want to block using described event? — Tetsuya Yamamoto
– Tetsuya Yamamoto, Commented Sep 20, 2017 at 8:20
No I want to block any query that contains html in query string value — Kevin Shah
– Kevin Shah, Commented Sep 20, 2017 at 8:43
@KevinShah did you try to use HttpUtility.ParseQueryString(), you can get query string params and check them to understand whether they have html tag or not — hasan
– hasan, Commented Sep 20, 2017 at 9:05
If user enters any html tag in querystring it will not go to action as because in my action I haven't set AllowHtml attribute — Kevin Shah
– Kevin Shah, Commented Sep 20, 2017 at 9:30

Hüseyin Burak Karadag · Accepted Answer · 2017-09-20 13:51:43Z

1

meybe can use RouteHandler for when a user needs to redirect to any external page, shorten long URLs, or make URLs more user friendly.

please check my answer

Error handling ASP.NET MVC

answered Sep 20, 2017 at 13:51

Hüseyin Burak Karadag

1,88817 silver badges23 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Karan · Accepted Answer · 2017-09-25 10:14:30Z

1

You can always choose CustomErrorMode="On" in web.config and configure with your error controller

Custom Error Mode will help you to redirect any invalid or malicious link or content to redirect it to your errorcontroller and handle it the way you want.

answered Sep 25, 2017 at 10:14

Karan

533 bronze badges

2 Comments

Kevin Shah Over a year ago

this will redirect to Error page that is correct but I do not want to redirect user on error page but dispaly message but now its ok with redirection

Karan Over a year ago

Anyways with redirection you can display a message if any html content is entered in URL and you can configure it in your route by specifying the pattern.

Ali Soltani · Accepted Answer · 2017-09-25 04:21:31Z

0

You can use Request validation for do it. It prevents to accept un-encoded HTML/XML etc from Client to server. It validates all the data that is passed from client to server. To use this feature , you must set requestValidationMode as 4.5 in web.config like:

<httpruntime requestvalidationmode="4.5" />

For more information please see this article.

answered Sep 25, 2017 at 4:21

Ali Soltani

10k5 gold badges33 silver badges58 bronze badges

Collectives™ on Stack Overflow

how to restrict html tags in query string in mvc

3 Answers 3

Comments

2 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

2 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related