CODEWITHSUNDEEP
asp.net-mvc-3razor
Benny
Benny

Reputation: 3917

ASP.NET MVC Dynamic External URL

I have a site where users can supply a URL of their choice.

I'm sure it's a security hole so what should I do to tighten that down without losing too much flexability?

If I were to leave it, how could I render a link or build a route such that I could link users externally? This doesn't work (of course):

<a href="@item.Location" target="_self">@item.Title</a>

Upvotes: 3

Views: 3538

Answers (1)

Max Becerra
Max Becerra

Reputation: 486

Append protocol before @item.URL like this: 

<a href="http://@item.URL" target="_blank">@Html.DisplayFor(modelItem => item.Title)</a>

Upvotes: 7

Related Questions