title: a potentially dangerous request.form value was detected but validateinput(false) not working
body: <p>I have installed VS2010 and MVC2 and testing a simple form using tinyMCE. When I post the contents of the textarea in tinyMCE I get the dreaded YSD and the message </p>
  
  <blockquote>
    <p>"a potentially dangerous....."</p>
  </blockquote>
  
  <p>I've seen this before so I put the <code>ValidateInput(false)</code> on the controller but no joy - I still get the error.</p>
  
  <p>page code in edit.aspx is:</p>
  
  <pre><code>    &lt;% using (Html.BeginForm()){ %&gt;
  
      &lt;!-- Gets replaced with TinyMCE, remember HTML in a textarea should be encoded --&gt;
      &lt;textarea id="elm1" name="mceText" rows="15" cols="80" style="width: 80%"&gt;
          &amp;lt;p&amp;gt;
              This is some example text that you can edit inside the
    &amp;lt;strong&amp;gt; TinyMCE editor&amp;lt;/strong&amp;gt;.
      &lt;/textarea&gt;
  
      &lt;br /&gt;
      &lt;input type="submit" name="save" value="Submit" /&gt;
      &lt;input type="reset" name="reset" value="Reset" /&gt;
  &lt;%} %&gt;
  </code></pre>
  
  <p>and Controller action is:</p>
  
  <pre><code>    [AcceptVerbs(HttpVerbs.Post)]
      [ValidateInput(false)]
      public ActionResult Edit(string mceText)
      {
  
          return View();
      }
  </code></pre>
  
  <p>Any thoughts - (I know the code is not complete) been trying this for hours but everyone just says to use  ValidateInput(false) </p>