phillip andrews - 2017-06-02

I am attempting to demonstrate that Page ValidateRequest="false" is detected by VCG.
I have this in my default.aspx file in the project I am scanning, but it is not being detected.
I am using the standard csfunctions.conf file tat has the following in;
<%@ ValidateRequest="false" %>=>[2]The application appears to deliberately de-activate the default .NET input validation functionality.

However it is not reporting as being detected.
Any ideas?

Regards

Phill