How to display a text (Html format) in a website (Asp.net C#)

Question

I have a text editer, after applying format to the text I display the text when a button is clicked. I want the text to be displayed with all the formatting applied in the text editor.

 lbl_Subject.Text = Server.HtmlEncode(formattedtext);

but it is not displayed in the format applied instead it is displayed as

<p> This is Para 1</p> <p> this is Para 2</p> <p> <strong>this is bold</strong></p>

how can I display the text with all the format applied in text editor

Update i tried with literal

the result is

&lt;p&gt; This is Para 1&lt;/p&gt; &lt;p&gt; this is Para 2&lt;/p&gt; &lt;p&gt; &lt;strong&gt;this is bold&lt;/strong&gt;&lt;/p&gt;

Chamika Sandamal · Accepted Answer · 2011-12-14 12:02:53Z

8

use div instead of label.

div1.InnerHtml=formattedtext;

edited Dec 14, 2011 at 12:02

answered Dec 14, 2011 at 11:17

Chamika Sandamal

24.4k5 gold badges68 silver badges88 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Louis Waweru · Accepted Answer · 2011-12-14 11:23:55Z

6

HtmlEncode makes sure that text is displayed correctly in the browser and not interpreted by the browser as HTML.

Try removing HtmlEncode or using HtmlDecode.

edited Dec 14, 2011 at 11:23

answered Dec 14, 2011 at 11:18

Louis Waweru

3,66210 gold badges40 silver badges54 bronze badges

1 Comment

Joel Etherton Over a year ago

Server.HtmlDecode(Server.HtmlEncode(formattedtext)) seems a little silly, but maybe that's just me.

Joel Etherton · Accepted Answer · 2011-12-14 11:26:08Z

If you want the text to render as html in the browser, then why are you HtmlEncoding it? HtmlEncode is intended to take code that potentially has html symbols in it and encode it so that those symbols print as raw text. I would say the code you presented behaves exactly as it should be expected to behave. If you want your code to output html to be rendered, then it should be with a literal and it should simply be text.

lit_Subject.Text = formattedtext;

ZombieSheep · Accepted Answer · 2011-12-14 11:15:46Z

1

You may want to use a Literal Control instead of a label. This should take your raw HTML string and output it as required on the page.

ASIDE : Be very, very careful when displaying HTML like this. It is not difficult to add malicious scripts, for example, which will be run from the viewed page.

answered Dec 14, 2011 at 11:15

ZombieSheep

30k12 gold badges72 silver badges114 bronze badges

Comments

Robert Giesecke · Accepted Answer · 2011-12-14 11:27:53Z

0

Take a look at the AntiXssLibrary (can be found via nuget).

Especially at the Sanitizer class. It takes a string and removes every security-related stuff from it.

it will change the names of css classes as well, so you might have to tinker with the results, to restore the class names. But it definitely allows you to get RAW HTML safely on your page, w/o risking XSS attacks.

answered Dec 14, 2011 at 11:27

Robert Giesecke

4,31423 silver badges22 bronze badges

Comments

mehdi gh · Accepted Answer · 2014-08-31 07:27:37Z

0

You can use this code : Html.Raw(formattedtext)

answered Aug 31, 2014 at 7:27

mehdi gh

11 bronze badge

Comments

Mukus · Accepted Answer · 2020-01-13 03:31:22Z

0

Another way to do this is by adding the pre tags. This will look like,

 lbl_Subject.Text = $"<pre>{formattedtext}</pre>"

If the label does not work change that to a div.

div_Subject.InnerHtml =  $"<pre>{formattedtext}</pre>"

answered Jan 13, 2020 at 3:31

Mukus

5,0743 gold badges46 silver badges58 bronze badges

Collectives™ on Stack Overflow

How to display a text (Html format) in a website (Asp.net C#)

7 Answers 7

Comments

1 Comment

Comments

Comments

Comments

Comments

Comments

Hot Network Questions

Collectives™ on Stack Overflow

7 Answers 7

Comments

1 Comment

Comments

Comments

Comments

Comments

Comments

Related