asp.net mvc. Inserting string data from model into javascript. best-practice

Question

I have to populate javascript code in html layout (hidden fields, method params) with string data from model.

Html.Encode is not appropriate for my task because it encodes ' symbol, bypass : (that ruines object attributes declaration) and so on.

I wrote static helper class that is used from View like this:

  alert('<%=ViewHelper.MakeJavaScriptSafe(Model.Message)%>');

I hope there is asp.net in-built function I don't know about for this task. Does it exist really?

Thank you in advance.

Robert Harvey · Accepted Answer · 2010-05-10 18:31:17Z

1

I believe what you are looking for is an Anti-Cross Site Scripting library, like this one.

answered May 10, 2010 at 18:31

Robert Harvey

181k48 gold badges349 silver badges515 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

I hope asp.net mvc "Html" object will get methods for javascript/html attributes/json safe encoding in the closest future.