MVC3 Html Encoding?? Html.TextBoxFor Html.EditorFor

Question

passing in something like "hi person" into the value of a textbox using either Html.TextBoxFor or Html.EditorFor

unfortunately the value isn't being Html Encoded.. can anyone explain why this is the case and is it fixed in MVC4..

i know you can do something like @Html.TextBox("Description", Server.HtmlDecode(Model.Description)) but is there an out of the box Html Helper that actually just encodes for you?

You should not be encoding/decoding when using those helpers, or the values they will cause to be submitted to the server. Doing so will cause over-encoding/over-decoding, and the loss of hair. There is nothing to be 'fixed' in MVC4 here. — Andrew Barber
– Andrew Barber, Commented Aug 23, 2012 at 0:08

bhamlin · Accepted Answer · 2012-08-23 00:10:37Z

1

Html.TextBoxFor does html-encode the value - it uses the TagBuilder class underneath, which does the encoding.

I'm not sure what you're expecting for "hi person", there are no characters in that string that would change when its encoded.

answered Aug 23, 2012 at 0:10

bhamlin

5,1971 gold badge24 silver badges17 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Andrew Barber · Accepted Answer · 2012-08-23 00:10:39Z

1

There is no need to encode/decode when dealing with the values being used in those HTML helpers, or when those values are returned to the web server on POST. That is all handled by the frameworks.

answered Aug 23, 2012 at 0:10

Andrew Barber

40.3k20 gold badges97 silver badges124 bronze badges

Collectives™ on Stack Overflow

MVC3 Html Encoding?? Html.TextBoxFor Html.EditorFor

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related