c# - ASP.NET MVC: does AntiForgeryToken work in mono? -


i'm trying use html.antiforgerytoken in asp.net mvc under mono (xsp) , not work. throws following exception. ideas?

system.argumentnullexception: argument cannot null. parameter name: inputstring   @ system.web.ui.objectstateformatter.deserialize (system.string inputstring) [0x00006] in /home/danipen/downloads/mono-2.8/mcs/class/system.web/system.web.ui/objectstateformatter.cs:131    @ system.web.ui.hiddenfieldpagestatepersister.load () [0x00007] in /home/danipen/downloads/mono-2.8/mcs/class/system.web/system.web.ui/hiddenfieldpagestatepersister.cs:57    @ system.web.ui.page.loadpagestatefrompersistencemedium () [0x0000f] in /home/danipen/downloads/mono-2.8/mcs/class/system.web/system.web.ui/page.cs:1763    @ system.web.ui.page.loadpageviewstate () [0x00000] in /home/danipen/downloads/mono-2.8/mcs/class/system.web/system.web.ui/page.cs:1769    @ system.web.ui.page.restorepagestate () [0x00051] in /home/danipen/downloads/mono-2.8/mcs/class/system.web/system.web.ui/page.cs:1454    @ system.web.ui.page.internalprocessrequest () [0x001b9] in /home/danipen/downloads/mono-2.8/mcs/class/system.web/system.web.ui/page.cs:1433    @ system.web.ui.page.processrequest (system.web.httpcontext context) [0x0005b] in /home/danipen/downloads/mono-2.8/mcs/class/system.web/system.web.ui/page.cs:1261

do know other way implement this?

thanks in advanced.

edit: view code (it's partial view). if remove line <%= html.antiforgerytoken() %> works fine, in other case thows exception described above.

<%@ control language="c#" inherits="system.web.mvc.viewusercontrol<codice.web.client.comment>" %>  <div class="comment" style="background-color: #009acf">  <div class="comment-meta">   <p class="comment-author">    <span class="avatarimage">     <%= html.avatarfor(model.commentinfo.owner) %>    </span>    <strong class="comment-author">      <%= html.encode(model.getauthorstring()) %>    </strong>    says:   </p>   <p class="comment-date">    <%= html.timeago(model.commentinfo.localtimestamp) %>   </p>  </div>   <div class="comment-body">   <div class="formatted-content">    <%= html.encode(model.commentinfo.comment) %>   </div>   <div class="form-content">    <% using(html.beginform(                    "editcomment",                    "comments",                    new                    {         repository = model.repository,         commentid = model.commentinfo.id        },                    formmethod.post,                    null))        { %>            <%= html.antiforgerytoken() %>         <%= html.textbox("newcomment", model.commentinfo.comment) %>          <div class="form-actions">          <a class"edit-cancel minibutton" href="#">           <span>cancel</span>          </a>          <button class="minibutton" type="submit">           <span>update comment</span>          </button>         </div>         <%        }    %>   </div>  </div> </div>

do have [validateantiforgerytoken] attribute set on controller action serving post verb?

edit: possible solution issue using newest mono master branch, because problem can replicated on older versions of mono (for example tarball april 22 causing same exception).

edit 2: needed working setting valid machinekey element in web.config file. keys can generated example this utility.


Comments

Post a Comment

Popular posts from this blog

Add email recipient to all new Trac tickets -

is there configuration change can made trac send notification email address upon creation of new tickets? if can't done through config, plugin second best option, source code modification last resort. note: setting smtp_always_cc in notification section of tracini send messages on updates. i'm in need of email notifications only on creation of new ticket. does have email notification? 1 option have create query list ten (or many) recently-created tickets. when looking @ results of query, use "rss feed" button @ bottom of page subscribe feed notify whenever results of query updated.
Read more

400 Bad Request on Apache/PHP AddHandler wrapper -

i'm trying create wrapper/handler called on apache server whenever requests php script inside of directory. way can authorize users entire directory or write other stuff called when directory called. this best configuration i've been able come with... <directory "/srv/http/innov/public_html"> options -indexes allowoverride order allow,deny allow directoryindex index.php </directory> then in /srv/http/innov/public_html/kb/ have .htaccess file... options -indexes addhandler auth_handler .php action auth_handler ../auth_handler.php then in /srv/http/innov/public_html/kb/auth_handler.php follows... <?php $file = $_server['path_translated']; echo $file; ?> access log: - - [02/dec/2010:17:43:15 -0500] "get /kb/index.php http/1.1" 400 590 error log: [thu dec 02 17:50:19 2010] [error] [client xxx.xxx.xxx.xxx] invalid uri in request /kb/ http/1.1 i've checked browser , seems making proper request...
Read more

php - Change action and image src url's with jQuery -

i parsing form 1 of sites using php proxy. working fine form action , img src of submit button url's relative. how can prepend full http//www.domain.com/ in front of each of url's in form? edit: here's form code once fed through new domain: <div style="display: none;" id="subscribeform" class="newform"> <h5>subscribe our newsletter</h5> <form action="/campaignprocess.aspx?listid=27057" method="post" onsubmit="return checkwholeform93426(this)" name="catemaillistform93426"> <div class="form"> <div class="item"> <label for="clfullname">full name</label> <br /> <input type="text" maxlength="255" id="clfullname" name="fullname" class="cat_textbox_small" st...
Read more