title: Potential dangerous request, hide error
body: <p>I am trying to check the security of my MVC application. When I try to input html or javascript it gives an error: Potential dangerous request.</p>
  
  <pre><code>Server Error in '/' Application.
  A potentially dangerous Request.Form value was detected from the client (TEKST="&lt;html&gt;&lt;b&gt;joo&lt;/b&gt;&lt;/ht...").
  Description: Request Validation has detected a potentially dangerous client input value, and processing of the request has been aborted. This value may indicate an attempt to compromise the security of your application, such as a cross-site scripting attack. To allow pages to override application request validation settings, set the requestValidationMode attribute in the httpRuntime configuration section to requestValidationMode="2.0". Example: &lt;httpRuntime requestValidationMode="2.0" /&gt;. After setting this value, you can then disable request validation by setting validateRequest="false" in the Page directive or in the &lt;pages&gt; configuration section. However, it is strongly recommended that your application explicitly check all inputs in this case. For more information, see http://go.microsoft.com/fwlink/?LinkId=153133.
  
  Exception Details: System.Web.HttpRequestValidationException: A potentially dangerous Request.Form value was detected from the client (TEKST="&lt;html&gt;&lt;b&gt;joo&lt;/b&gt;&lt;/ht...").
  
  Source Error:
  
  An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace below.
  </code></pre>
  
  <p>This looks good, it is not possible to inject HTML or JavaScript. But the thing that I do not like, the users will see my version of ASP.net and everything. </p>
  
  <p>How can I remove this error and give just a message with: I don't like your input or whatever.</p>
  
  <p>I have tried to do this but this is not working:</p>
  
  <pre><code>[Authorize]
  public ActionResult Create(int album_id)
  {
      ViewBag.album_id = album_id;
      return View();
  }
  
  [Authorize]
  [HttpPost]
  public ActionResult Create(REVIEW model)
  {
      string txt = null;
      try
      {
          txt = model.TEKST;
      }
      catch (System.Web.HttpRequestValidationException)
      {
          txt = "errorrr";
      }
  
  
      return RedirectToAction("Add", new { tekst = txt, album_id=model.ALBUM_ID});
  }
  </code></pre>
  
  <p>SOLUTION:
  See Nudier's answer</p>