[mapguide-trac] #1984: AjaxViewer SetSelectionXML does not work anymore on Mapguide 2.4

[MapGuide Open Source]

#1984: AjaxViewer SetSelectionXML does not work anymore on Mapguide 2.4
---------------------------+------------------------------------------------
   Reporter:  znarf1965    |       Owner:  jng                            
       Type:  defect       |      Status:  new                            
   Priority:  high         |   Milestone:  2.4                            
  Component:  AJAX Viewer  |     Version:                                 
   Severity:  blocker      |    Keywords:  2.4 Ajax viewer SetSelectionXML
External_id:               |  
---------------------------+------------------------------------------------

Comment(by jng):

 Ok, the problem is that we are getting a potentially dangerous
 Request.Form value due to the selection XML.

 Why did this not happen in MGOS 2.2? Because the MapGuide .net API was
 still at .net Framework 2.0. For MGOS 2.4 and AIMS 2013, the MapGuide .net
 API is now at .net Framework 4.0

 This brings up another question. AIMS 2013 is obviously doing something
 correct in this regard. The solution/workaround is to add this line to
 under the {{{<system.web>}}} section of web.config in mapviewernet:
 {{{
 <httpRuntime requestValidationMode="2.0" />
 }}}
 This is where I'll need you to do some fact finding (as I do not have AIMS
 2013 and you do). Does AIMS 2013 have this configuration setting for
 mapviewernet? If so, I'll put this in as the official fix, otherwise we
 need to find out the .net web application configuration differences
 between MGOS 2.4 and AIMS 2013, something I'll need your help with.

-- 
Ticket URL: <http://trac.osgeo.org/mapguide/ticket/1984#comment:2>
MapGuide Open Source <http://mapguide.osgeo.org/>
MapGuide Open Source Internals