How can I bypass request validation for a single field?
<p>I can see the need for request validation in this age of XSS and other hacks.
But it can be a bit of overkill, it's like cutting off your child's legs to ensure he won't run onto the road and get killed.</p>

<p>We're getting complaints from that it isn't possible to set a password like <code>&lt;password&gt;</code>.
The only way to fix this, as far as I can tell, is to set <code>ValidateRequest="false"</code> on a whole bunch of pages (such as registration, logon, reset password).  And when using .NET 4.0, you also need to set <code>&lt;httpRuntime requestValidationMode="2.0" /&gt;</code> for the whole application.</p>

<p>Is this really the only way?  Is there no way to state that only the password field should not be validated?</p>
