ASP.NET in a Nutshell, 2nd Edition

<processModel> | 453

web.config

Reference

This is the Title of the Book, eMatter Edition

Copyright © 2008 O’Reilly & Associates, Inc. All rights reserved.

pageBaseType

Specifies the base class from which all pages are derived. The default is

System.Web.UI.Page.

userControlBaseType

Specifies the base class from which all user controls are derived. The default

is

System.Web.UI.UserControl.

validateRequest

Specifies whether ASP.NET will automatically check the Request object for

potentially dangerous input. If dangerous input, such as HTML or script, is

found, an exception of type

HttpRequestValidationException is thrown. The

default is

True. This attribute is only supported in Version 1.1 of ASP.NET.

Child Elements

None

Example

The example disables both Session state and ViewState at the page level:

<configuration>

<system.web>

<pages

enableSessionState="false"

enableViewState="false" />

</system.web>

</configuration>

Notes

The <pages> element is very useful for setting application-level (or folder-level)

defaults for pages in your application. One possible use is to place pages that do

not require access to session state in a separate folder and use the

<pages> element

to disable session state for that folder. In this case, a session will not be created for

a user until the user requests a page in your application for which

EnableSessionState is True.

The default setting of

EnableViewStateMac is True. It’s important ...