CODEWITHSUNDEEP
htmlasp.nettags
korkotyan
korkotyan

Reputation: 53

Display ASP Tag String As HTML in ASP.NET

I am trying to display an asp drop down list tag as a string as an asp tag in html:

<%= HttpUtility.HtmlDecode("<asp:DropDownList ID=\"day\" runat=\"server\"></asp:DropDownList>") %>

If I try to display a html tag as a string, like img tag it displays it perfectly, but with <asp:DropDownList...> it just would not display anything.

Please Help I am trying to solve it for 2 days already.

Upvotes: 1

Views: 505

Answers (2)

Arunprasanth K V
Arunprasanth K V

Reputation: 21961

asp.net applications try to prevents cross site scripting attack so when we are putting a value directly to UI,i mean inner html a string which contain something like < > will be consider as cross script so it will not allow that.

Example :

string mystring="<asp:Button id="b1" Text="Submit" runat="server" />"

if we are trying to put this code directly to UI field then it will not allow us to do this

Note : we can off cross scripting feature in asp.net but it is not a good idea

Insted of asp controls you can use pure html controls then it will work. 

string mystring="<input type="button" id="b1" Text="Submit" runat="server" />"

Note : if you are allowing user to enter sensitive information to your program always think about cross site scripting attack you need to prevent it.

HttpUtility.HtmlDecode encode your string

html encoding is to prevent cross site script attacks so it will work

Note: Encode Output Use the HttpUtility.HtmlEncode method to encode output if it contains input from the user or from other sources such as databases. HtmlEncode replaces characters that have special meaning in HTML-to-HTML variables that represent those characters. For example, < is replaced with < and " is replaced with ". Encoded data does not cause the browser to execute code. Instead, the data is rendered as harmless HTML.

Ref :msdn

Upvotes: 1

Med.Amine.Touil
Med.Amine.Touil

Reputation: 1235

Use the HtmlTextWriter Class and the RenderControl method.

Exp:

var finalHtmlTag = new StringBuilder(); 
var tempWriter= new StringWriter(finalHtmlTag ); 
var tempHtml= new HtmlTextWriter(tempWriter); 
YourConrol.RenderControl(tempHtml); 
var html = finalHtmlTag.ToString();

Upvotes: 0

Related Questions