title: A potentially dangerous Request.Form value was detected
body: <p>I have a form with the wmd editor on it. The input text area is rendered using:</p>
  
  <pre><code>&lt;%: Html.TextAreaFor(t =&gt; t.NewsBody, new{@class="wmd-panel", id="wmd-input"}) %&gt;
  </code></pre>
  
  <p>Every time I submit the form I get <code>A potentially dangerous Request.Form value was detected from the client</code></p>
  
  <p>I tried setting [ValidateInput(false)] on the action method, I tried adding <code>
      &lt;httpRuntime requestValidationMode="2.0" /&gt;</code> to the web.config and I've tried <code>validateRequest="false"</code> in the pages directive in web.config but it's still happening.</p>
  
  <p>Any ideas?</p>
  
  <p><strong>Edit</strong></p>
  
  <p>Action method:</p>
  
  <pre><code> [ILFFAuthorize(Roles = "Admin")] // this is a custom auth attrobite
          [HttpPost]
          [ValidateInput(false)]
          public ActionResult AddNews(FormCollection col){
  
          //public ActionResult AddNews(News news)
          //{
              if (ModelState.IsValid)
              {
                  News news = new News();
                  news.NewsDate = DateTime.Now;
                  news.NewsPosterId = 0;
  
                  news.NewsTitle = col["NewsTitle"];
                  news.NewsBody = col["NewsBody"];
                  newsRepository.Add(news);
                  newsRepository.Save();
  
                  return RedirectToAction("Index", "Home");
              }
              else
              {
                  return View();
              }
          }
  </code></pre>