How to display the string with HTML ASCII code?

Question

I have a string "akl&#85@^" as a password retrieved from database. The string is showing a different value as "aklU@^" on the web page.

It is basically because "&#85" is the HTML ASCII code of the upper case letter "U".

Is there anyway I can skip the convertion, and display the string as "akl&#85@^"? Thanks.

Not sure if it matters, I'm coding in C#.

String.fromCharCode(n1, n2, ..., nX) use this function, in java script — Shadab Siddiqui
– Shadab Siddiqui, Commented Jul 20, 2018 at 21:16
You shouldn't even know your users' passwords. plaintextoffenders.com/faq/devs — Tom Blodget
– Tom Blodget, Commented Jul 21, 2018 at 0:25
Which web page rendering technology are you using? Razor? Webforms? Roll-your-own? Your code seems vulnerable to HTML/script-injection (or just plain misformatting) if you are pasting data strings into HTML code. Your question is an attempt to address it but be sure to do it systematically. Every HTML text node is HTML, not text. — Tom Blodget
– Tom Blodget, Commented Jul 21, 2018 at 0:34

user10108359 · Accepted Answer · 2018-07-20 21:12:29Z

3

You can use the following function to escape HTML

function escapeHTML(str){
    return str.replace( /[\u00A0-\u9999<>\&]/gim, function( i) { return '&#' + i .charCodeAt(0) + ';'; });
}

<span id="testResult"></span>
<script>
function escapeHTML(str){
        return str.replace( /[\u00A0-\u9999<>\&]/gim, function( i) { return '&#' + i .charCodeAt(0) + ';'; });
    }
document.getElementById("testResult").innerHTML = escapeHTML("akl&#85@^");
</script>

answered Jul 20, 2018 at 21:12

user10108359

Sign up to request clarification or add additional context in comments.

Comments

Carsten Massmann · Accepted Answer · 2018-07-20 21:12:45Z

2

I don't really know C# but basically I believe you should do a replace operation of the password string, replacing & with &.

answered Jul 20, 2018 at 21:12

Carsten Massmann

28.4k3 gold badges25 silver badges49 bronze badges

1 Comment

Jialu Zhu Over a year ago

I ended up doing a stringvalue.replace('&', '&amp') in some javascript that was being used to get this value and that got it to display correctly. Nice and simple! Thanks!

Shadab Siddiqui · Accepted Answer · 2018-07-20 21:30:08Z

0

function unicodeEscape(str) {
  for (var result = '', index = 0, charCode; !isNaN(charCode = str.charCodeAt(index++));) {
    result += '\\u' + ('0000' + charCode.toString(16)).slice(-4);
  }
  return result;
}

Or you can use this

function escapeUnicode(str) {
    return str.replace(/[^\0-~]/g, function(ch) {
        return "\\u" + ("000" + ch.charCodeAt().toString(16)).slice(-4);
    });
}

You can use this to skip all of your unicode ascii, this is not created by me just found this which will work for you.

edited Jul 20, 2018 at 21:30

answered Jul 20, 2018 at 21:22

Shadab Siddiqui

1017 bronze badges

Collectives™ on Stack Overflow

How to display the string with HTML ASCII code?

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

Comments

1 Comment

Comments

Your Answer

Sign up or log in

Post as a guest

Related