Hi
I have been reading about the deferred validation in .NET 4.5 and thought I would try and switch my validation from 2.0 compatibility to the latest. On paper this seems a lot better as it would only fire the
A potentially dangerous Request.QueryString value was detected from the client
if I try to access an object with the dodgy HTML in. So I added <httpRuntime requestValidationMode="4.5" /> the target framework is 4.5.2. However it didn't work as I would expect.
I request a page e.g. page.aspx?id=<br /> in mode 2.0 I would expect this to raise an error unless I had added the ValidateRequest="false" to the header. In mode 4.5 I would expect this to work fine unless I tried to access the request.querystring("ID").
So why is this raising an error?
Did deferred validation ever make it past release? If you look at Go to the complete details ...