从客户端检测到有潜在危险的Request.Form值

1.带有html标记内容提交（使用web编辑器）：

js:

    <script type="text/javascript">

        //简单模式

        var editor;

        KindEditor.ready(function (K) {

            editor = K.create('textarea[name="Content"]', {

                resizeType: 1,

                allowPreviewEmoticons: false,

                allowImageUpload: false,

                items: [

                        'fontname', 'fontsize', '|', 'forecolor', 'hilitecolor', 'bold', 'italic', 'underline',

                        'removeformat', '|', 'justifyleft', 'justifycenter', 'justifyright', 'insertorderedlist',

                        'insertunorderedlist', '|', 'emoticons', 'image', 'link'

                ]

            });

        });

    </script>

cshtml:

        @using (Html.BeginForm("Add"))

        {

            <table border="0" width="100%">

                <tr>

                    <td>标题:

                    </td>

                    <td>

                        <input type="text" name="Title" />

                    </td>

                </tr>

                <tr>

                    <td>内容:

                    </td>

                    <td>

                        <textarea name="Content" cols="30" rows="10"></textarea>

                    </td>

                </tr>

            </table>

            <input type="submit" value="保存内容" />

        }



        @if (ViewBag.Success == 1)

        {

            @:<script> alert("添加成功"); </script> 

        }

C#:

解决方案1：标记Action方法不进行提交验证

        //新增文章内容

        [ValidateInput(false)]

        public ActionResult Add(string Title = "", string Content = "")

        {

            if (Title.Length > 0)

            {

                AddArticle(Title, Content);

            }

            return View();

        }

解决方案2：（失败）

        //新增文章2

        public ActionResult AddTwo(string Title = "", string Content = "")

        {

            this.ValidateRequest = false;//此处禁用请求验证不起作用

            if (Title.Length > 0)

            {

                AddArticle(Title, Content);

            }

            return View();

        }

 

解决方案3：使用Ajax方法提交，将html进行转码

        //提交新增内容

        $(function () {

            $("#addBtn").click(function () {

                var title = $("input[name=Title]").val();

                //var content = $("textarea[name=Content]").text(); 此方式不可用,返回结果为空

                var content = KindEditor.escape(editor.html());



                $.post("@Url.Action("AddThree")", {

                    Title: title, Content: content

                }, function (data) {

                    if (data == 1) {

                        alert("添加成功");

                    } else {

                        alert("添加失败!");

                    }

                });

            });

        });

后台处理：

        //新增文章3

        public void AddThree(string Title = "", string Content = "")

        {

            if (Title.Length > 0)

            {

                AddArticle(Title, Content);

                Response.Write("1");

            }

            else

            {

                Response.Write("0");

            }

        }