Inside the new ValidateRequest feature

Victor Garcia Aprea has a great detail about the new validation request feature from Microsoft.

Great, but my point  is still valid,  this break the rules.

Because I think about production environment. Because I talk about sites went live since few months, and suddenly a new rule come without any publicity, and change the rules, creating errors.

This is what I call a very bad mistake to implement a new rule which break your code.

I would prefer to have this feature having a false value by default, and some strong recomendations by .Net team to turn it on rather than now having to check every single page.

For example what's about a site like I have with a search box common to every page. Imagine if I want to turn off this validaterequest for this box and on for some other textboxes.
I have only for the moment the choice for the page or for all the site.

So I would be happy to see a better implementation in the next release, because I am a developer dealing with the real world, and I don't have too much time to test some new stuff from Microsoft ;-)