ValidateRequest not working
<p><strong>Here's the scenario:</strong></p>

<p>I've got a regular hyperlink on my .ascx.  (no I have decided NOT to use an asp.net control)
That hyperlink when clicked sends over the querystring an ID of an object to be deleted so in the code-behind of my page, I grab that and if it's there call a RemoveSomeItem method which removes it and then does a Response.Redirect back to the Request.Path since we don't know what .aspx page will be using this control.  That all works fine.</p>

<p>But I need to also show a nice message at the top of that .aspx page after redirect "you have just deleted [item name]"</p>

<p>So what I did was in that response redirect, I added an additional querystring param called removedItemName which has for example even some HTML in the string:</p>

<pre><code>&amp;removedName=&lt;sup&gt;©&lt;/sup&gt; Hockey Cup - Large
</code></pre>

<p><strong>Problem</strong> ASP.NET detects this as a potentially unsafe string but of course this will never be so I tried to add this to the .aspx page directive:</p>

<pre><code>ValidateRequest="false"
</code></pre>

<p><strong>but it did not work</strong>.  ASP.NET is still throwing the error:</p>

<p>A potentially dangerous Request.QueryString value was detected from the client (removedName="<sup>©</sup> Hockey...").</p>

<p><strong>Second</strong>, does anyone pass Html like this in a querystring for completely harmful circumstances?  Meaning is this common?  And does it cause problems with passing strings with spaces via a querystring param or are spaces acceptable?</p>
