This topic has not yet been rated - Rate this topic

HttpUtility.HtmlAttributeEncode Method (String, TextWriter)

.NET Framework 4.5

Minimally converts a string into an HTML-encoded string and sends the encoded string to a TextWriter output stream.

Namespace: System.Web
Assembly: System.Web (in System.Web.dll)

public static void HtmlAttributeEncode(
	string s,
	TextWriter output
)

Parameters

s: Type: System.String
The string to encode

output: Type: System.IO.TextWriter
A TextWriter output stream.

Remarks

The HtmlAttributeEncode method converts only quotation marks ("), ampersands (&), and left angle brackets (<) to equivalent character entities. It is considerably faster than the HtmlEncode method.

The string result from the HtmlAttributeEncode method should be used only for double-quoted attributes. Security issues might arise when using the HtmlAttributeEncode method with single-quoted attributes.

Version Information

.NET Framework

Supported in: 4.5, 4, 3.5, 3.0, 2.0, 1.1, 1.0

Platforms

Windows 8, Windows Server 2012, Windows 7, Windows Vista SP2, Windows Server 2008 (Server Core Role not supported), Windows Server 2008 R2 (Server Core Role supported with SP1 or later; Itanium not supported)

The .NET Framework does not support all versions of every platform. For a list of the supported versions, see .NET Framework System Requirements.

Reference

HttpUtility Class

HtmlAttributeEncode Overload

System.Web Namespace

Other Resources

How to: Protect Against Script Exploits in a Web Application by Applying HTML Encoding to Strings

Did you find this helpful? Yes No

Not accurate

Not enough depth

Need more code examples

(1500 characters remaining)