lang:

ASP.Net

regex:

<%@\s?Page\s?.*\s?validateRequest\s?=\s?(\'|\")false(\'|\")

description:

Default request validation being disabled. Reference: http://www.asp.net/whitepapers/request-validation
tags:
input request validation
results