title: ValidateInput(false) vs AllowHtml
body: <p>I have a form that is used to create a memo, to do that I am using a rich text editor to provide some styling, this creates html tags in order to apply style. When I post that text, the mvc throws an error to prevent potentially dangerous scripts, so I have to specifically allow it. </p>
  
  <p>I have found 2 ways of doing this, one is to decorate the controller method with <code>[ValidateInput(false)]</code> and the other is to decorate the <code>ViewModel</code> attribute with <code>[AllowHtml]</code>. To me, <code>[AllowHtml]</code> looks much nicer, but I have only found that approach used 1 time and the <code>[ValidateInput(false)]</code> seems to be the preferred way.</p>
  
  <p>Which method should I use and what are the differences between the two?</p>