title: A potentially dangerous Request.Form value was detected from the client
body: <p>I am using CKEditor/CKFinder as wysiwyg editor on my MVC.NET site. </p>
  
  <p>I have set <code>[ValidateInput(false)]</code> and it works when debugging it locally, but I receive the following error when I have published the site:</p>
  
  <pre><code>A potentially dangerous Request.Form value was detected from the client (message="&lt;p&gt;
  &lt;em&gt;Testing&lt;/e...").
  </code></pre>
  
  <p>can anyone explain why the published site is different from the locally site, especially when I have set <code>[ValidateInput(false)]</code>?</p>
  
  <p>*<em>Update:</em>*I am using .Net 3.5 so shouldn't  <code>[ValidateInput(false)]</code> work out the box?</p>