id	summary	reporter	owner	description	type	status	priority	milestone	component	version	resolution	keywords	cc
4708	Missing configuration from pre-3.0: HtmlEncodeOutput	Christian Jensen	Garry Yao	"It would appear that the 3.0.1 build does not contain a very important configuration for ASP.NET (and ASP.NET MVC) - the ability to encode the HTML prior to the form submission.

ASP.NET balks at any content being submitted that contains a < and a > with the message ""A potentially dangerous Request.Form value was detected from the client""

This functionality was added in #1266 in a prior release.

It is possible to circumvent the issue with setting a ""ValidateInput=false"" setting however this is set either at the page level or the method level. Ideally this would be as granular as the field in question but those facilities do not exist at this time.

The ideal situation would be to have CKeditor pre-encode the content before submission to the server.

Workarounds available:
 * http://stephenwalther.com/blog/archive/2009/02/20/tip-48-ndash-disable-request-validation.aspx
 * http://forums.asp.net/p/1235144/2239950.aspx"	New Feature	closed	Normal	CKEditor 3.1	Core : Output Data	SVN (CKEditor) - OLD	fixed	Confirmed Review+	christian@…