.net mvc 4はクライアントから潜在的な危険があるRequestを検出する.Form値

[ValidateInput(false)]でいいです.ネット上で何を言いますか.Configの中は直して、少しも役に立たない
 

        [HttpPost]

        [ActionName("Edit")]

        [ValidateInput(false)]  

        public ActionResult Edit(BlogInfo model)

        {

            model.UpdateTime = DateTime.Now;

            ef_Help.ModifyWithOutproNames<BlogInfo>(model, "CreateTime");

            // db.TagInfo.Where(X=>X.BlogID

            db.Database.ExecuteSqlCommand(string.Format(@"

            delete dbo.TagInfo where BlogID={0} delete dbo.Classification where BlogID ={1}", model.BlogID, model.BlogID));

            if (model.Tag != null)

            {

                foreach (var item in model.Tag.Split(','))

                {

                    db.TagInfo.Add(new TagInfo() { BlogID = model.BlogID, TagName = item });

                }

            }



            if (model.Classifications != null)

            {

                foreach (var item in model.Classifications.Split(','))

                {

                    db.Classification.Add(new Classification() { BlogID = model.BlogID, ClassificationName = item });

                }

            }



            db.SaveChanges();

            return View(model);

            //return Edit(model.BlogID);

            // Response.Write("1"); Response.End();



        }