asp.net-mvc-2html.encode

ASP.NET MVC2 -- How is Html.Encode() used?

How is Html.Encode() used? What is its purpose, and how is it useful?

Solution

  • It HTML encodes the passed it text - this escapes things to avoid certain types of attacks, such as XSS.

    For example:

    Html.Encode("<script>alert('hi');</alert>")

    Will result in:

    &lt;script&gt;alert('hi');&lt;/script&gt;

    Being output to the page. This ensures that the script will not run.