CKeditor A potentially Dangerous Request.Form Value Was Detected From The Client

I’m using MVC2 ASP.NET 4.0 and Enitity Framework

Here we go:

1. In CKeditor config.js file

CKEDITOR.editorConfig = function (config) {
config.language = 'en',
ignoreEmptyParagraph = true;};

2. In your aspx page  include:

<script type="text/javascript" src="<%= Url.Content("~/Content/scripts/wysiwyg/ckeditor.js")%>"></script>

3. Now let’s say that your View is strongly typed.

<% using (Html.BeginForm()) {%>
   <%: Html.ValidationSummary(true) %>
   <fieldset>
   <legend>Fields</legend>
            <div>
                <%: Html.TextBoxFor(model => model.Title) %>
                <%: Html.ValidationMessageFor(model => model.Title) %>
            </div>
            <div>
                <%: Html.LabelFor(model => model.Descripcion) %>
            </div>
            <div>
                <%-- Instead of
                <%: Html.TextBoxFor(model => model.Description) %>
                 use: --%>
                <textarea id="Description" name="Description" rows="2">
                     <%= Model.Description %>
                </textarea>
                <%: Html.ValidationMessageFor(model => model.Description) %>
            </div>
            <p>
                <input type="submit" value="Save" />
           </p>
   </fieldset>
 <% } %>

<script type="text/javascript">
    CKEDITOR.replace('Description', { toolbar: '1', htmlEncodeOutput: true});
</script>

 

4. Your action will look this:

[HttpPost]
public ActionResult Create(MyModel model)        {

if (ModelState.IsValid)            {
     // use System.Net.WebUtility.HtmlDecode() to store unencoded HTML
     model.Description =  System.Net.WebUtility.HtmlDecode(model.Description);
     var entity = EntityAssemblerService.MyModelToEntity(model);
     var result = _repository.Add(entity);
     _repository.Save();
    return View(model);
}
else  {
return View(model);
}
}

Good Luck