Here Mudassar Ahmed Khan has explained with an example, what is the difference between ValidateInput(false) v/s AllowHtml in ASP.Net MVC i.e. what is the difference between ValidateInput(false) and AllowHtml in ASP.Net MVC.
Both ValidateInput(false) and AllowHtml attributes are used to allow sending HTML content or codes to server which by default is disabled by ASP.Net MVC to avoid XSS (Cross Site Scripting) attacks.
↧