A potentially dangerous Request.Form

Please include in your page directive ValidateRequest="false" , it is set to true by default!

example:

<%@ Page ValidateRequest="false" Language="C#" AutoEventWireup="false" %>

Naturally this is a horrible solution.... it works (kind of) if the fckeditor is the only control on the page... but what if you have a fckeditor AND a regular textbox?

Ugh.

Better to wrap the fckeditor with a custom control, and insert javascript that relies on events to encode the data it's preparing to post. I use javascript's "escape" for that.

I sure hope all you guys that post solutions to this problem like "please include in your page directive ValidateRequest='false'" also post your website urls so people can play around with them and do nasty things to your servers/websites.