Disable HTML Encoding on Asp.net HyperLink attributes

Question

I have a HyperLink on my usercontrol in which I set the onlick event dynamically on the server side like this :

this.Attributes["onclick"] = string.Format("javascript:alert('{0}')", base.NavigateUrl);

The problem is that when Asp.net renders the page, it ends up with something like this

<a href='...' onclick="javascript:alert(&#39;TEST&#39;)>LINK</a>

which obviously is not valid Javascript. Using " instead of ' wouldn't help neither, the generated HTML is alert("TEST")

Is there any way around this?

Thank you.

Jacob · Accepted Answer · 2011-02-15 00:50:11Z

3

onclick="javascript:alert('TEST')" is perfectly valid. When the page is parsed, entities should be replaced with their counterparts before JavaScript processes the value. So in pass 1, the HTML parser will change the attribute value to javascript:alert('TEST');, which is valid JavaScript.

answered Feb 15, 2011 at 0:50

Jacob

79k24 gold badges159 silver badges245 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

0xFF Over a year ago

Oh thanx, I've been inspecting the HTML directly

Druid · Accepted Answer · 2012-06-28 11:01:54Z

1

It is not working when using Jquery.

Server side:

this.Attributes["onclick"] = "$('#button').click();";

Client side:

onclick="$(&amp;#39;#button&amp;#39;).click();" gives an error.

Is there anyway to just get 'real' single quotes client side?

edited Jun 28, 2012 at 11:01

Druid

6,4634 gold badges44 silver badges57 bronze badges

answered Apr 10, 2012 at 10:14

royu

3872 gold badges5 silver badges15 bronze badges

Comments

Dmitry Kirsanov · Accepted Answer · 2013-09-11 11:15:54Z

0

royu,

Unfortunately, Microsoft thinks this is a "security feature" and they don't really care about browser or JavaScript compatibility. One way to override it is to use Eval([string]) instead of the plain text. In that case the value should not be encoded.

answered Sep 11, 2013 at 11:15

Dmitry Kirsanov

945 bronze badges

Collectives™ on Stack Overflow

Disable HTML Encoding on Asp.net HyperLink attributes

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related