From 1936743ca0d7638fd4691f015f985e805ecd2b71 Mon Sep 17 00:00:00 2001
From: Nicholas Mayne <Jetski5822@gmail.com>
Date: Mon, 23 Jun 2014 22:34:58 +0100
Subject: [PATCH] #20277: Don't validate password inputs on Change Password

Work Item: 20277
---
 .../Modules/Orchard.Users/Controllers/AccountController.cs       | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs b/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
index 1dc2dc554..88ccc509c 100644
--- a/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
+++ b/src/Orchard.Web/Modules/Orchard.Users/Controllers/AccountController.cs
@@ -214,6 +214,7 @@ namespace Orchard.Users.Controllers {
         [Authorize]
         [HttpPost]
         [AlwaysAccessible]
+        [ValidateInput(false)]
         [SuppressMessage("Microsoft.Design", "CA1031:DoNotCatchGeneralExceptionTypes",
             Justification = "Exceptions result in password not being changed.")]
         public ActionResult ChangePassword(string currentPassword, string newPassword, string confirmPassword) {