title: Input sanitization with MVC Razor - how to be safe?
body: <p>If I have a standard signup form with a text field, and I type script tags into it, MVC sends back an error saying that "A potentially dangerous Request.Form value was detected from the client". Is this just a debug error? Will my users see that on the live site?</p>
  
  <p>Is there a safe and easy way to just silently accept and encode/sanitize input from a field such that MVC doesn't throw up a scary error, but the input is rendered harmless?</p>
  
  <p>Obviously I'd also want to make sure my output is encoded, but Razor takes care of that for the most part, and I'm careful with <code>@Html.Raw</code>. We are also already taking care of database inputs by using parameterized queries, so SQL injection shouldn't be a threat.</p>