Write HTML to page in MVC 4

Question

I have some HTML stored in the database that looks exactly like this:

&lt;strong&gt;&lt;a href="http://www.google.com" target="_blank"&gt;Maintenance scheduled &lt;/a&gt;&lt;/strong&gt;tomorrow

I want to output that to the Razor view properly formatted as HTML. I do not want to see the < and >, I just want the HTML.

You can see from this snippet that I've tried several different things:

div id="maintenanceMessage">
            @*@HttpUtility.HtmlDecode(sysSettings.MaintenanceMessage)*@
            @*@HttpUtility.HtmlDecode((new HtmlString(sysSettings.MaintenanceMessage)).ToString())*@
            @Html.Raw(sysSettings.MaintenanceMessage)
</div>

But in every case it keeps showing it as text:

<strong><a href="http://www.google.com" target="_blank">Maintenance scheduled </a></strong>tomorrow

and not formatted HTML. I'm not sure what I am doing wrong?

mxmissile · Accepted Answer · 2014-01-24 17:56:55Z

3

Try

@MvcHtmlString.Create(HttpUtility.HtmlDecode(sysSettings.MaintenanceMessage))

answered Jan 24, 2014 at 17:56

mxmissile

11.7k6 gold badges57 silver badges85 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

mxmissile Over a year ago

need to be careful using this though, if the content is user generated, you will be wide open to XSS attacks

jwatts1980 Over a year ago

Excellent. That did the trick. In this case, only the highest level admins have access to that field, and the message would only show in the backend of the site. But, warning noted. Thank you!

Matt Bodily · Accepted Answer · 2014-01-24 18:01:09Z

0

if you replace the ascii before sending it to the view does it work. we send our strings through these

public string Decode(string value)
    {
        return (value)
            .Replace("&quot;", "\"")
            .Replace("&lt;", "<")
            .Replace("&gt;", ">");
    }

    public string Encode(string value)
    {
        return (value)
          .Replace("\"", "&quot;")
          .Replace("'", "''")
          .Replace("<", "&lt;")
          .Replace(">", "&gt;");
    }

answered Jan 24, 2014 at 18:01

Matt Bodily

6,4134 gold badges32 silver badges51 bronze badges

Comments

Edgar Froes · Accepted Answer · 2014-01-24 18:03:49Z

0

Check your stored content. Maybe when you tried to store it in the database, it got the special HTML characters replaced with encoding characters. For example:

In the Unicode format, every < sign from the HTML tags would be replaced with the < character.

It's better to store the raw HTML then the encoded HTML, so you won't have to deal with Coding/Encoding conversions.

answered Jan 24, 2014 at 18:03

Edgar Froes

8171 gold badge9 silver badges23 bronze badges

Collectives™ on Stack Overflow

Write HTML to page in MVC 4

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

2 Comments

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related