weirdness with validaterequest
-
I have a form that is failing the request validation in asp.net. I am quite aware of the ramifications of the security that validaterequest buys you and don't want to turn it off. My problem is that the validation only fails on one particular web server. I have checked the web.config and machine.config and they appear the same on both a box that fails the validation and one that lets it go through. I can copy the entire app folder from one server to another and it makes no difference in the behavior. Does anyone know of any other place where this might be turned off? I checked all the iis settings and they also appear the same for both servers. I'm at a loss as to why it doesn't happen on both boxes. Any ideas on where to look or what to check? Both servers are Windows 2003 server with the latest iis. thanks for any help or ideas on what to look at, Tim