Request protection active, string not allowed !