How to render HTML string in ASP.NET MVC?

Question

On my main page, I have the code @{Html.RenderPartial("_Partial1.cshtml");}, and on my Partial, I have an HTML string:

@{ 
    // The string is actually dynamic, not static. This is here for simplicity
    string abc="<div class=\"error\">abc</div>";
} 
@abc

I want to output abc with some CSS error styles, but I actually got <div class="error">abc</div> - of course, no styles there. How do I make it interpreted as HTML source code and not a string?

stackoverflow.com/questions/4281424/…

adt
– adt

2013-03-21 13:26:13 +00:00
Commented Mar 21, 2013 at 13:26 — adt
– adt, Commented Mar 21, 2013 at 13:26
What's wrong with <div class="error">abc</div>?

alex
– alex

2016-02-11 20:00:25 +00:00
Commented Feb 11, 2016 at 20:00 — alex
– alex, Commented Feb 11, 2016 at 20:00

Nico Schertler · Accepted Answer · 2013-03-21 13:24:14Z

136

You can use the Html.Raw() method for that.

answered Mar 21, 2013 at 13:24

Nico Schertler

32.7k4 gold badges45 silver badges76 bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

cgatian Over a year ago

This was absolutely amazing. Tip if you have an .html file you want to render instead use: @Html.Raw(File.ReadAllText(Server.MapPath(<htmlpath>)))

Unw0und Over a year ago

This is a dangerous answer. See en.wikipedia.org/wiki/Cross-site_scripting

eaglei22 Over a year ago

Say I was to define a global variable in razor, and then use @html.Raw( on this variable because I want to define some markup in it and render on view. Is there a way someone can set a value to a Razor variable from the url? I just want to make sure this isn't vulnerable to XSS through URL injection.. Thanks!

Nico Schertler Over a year ago

@user1794106 As long as you don't fill the variable from parts of the request, then no. Razor view variables are entirely evaluated on the server in a local scope.

Nico Schertler Over a year ago

@Drakoumel And what potential security issues might that be? This method is not more dangerous than any other method that creates output.

|

Hrvoje · Accepted Answer · 2021-01-13 09:46:42Z

2

And if you are using model in your view than use:

@model YourApp.Models.YourModel
....

@Html.Raw(@Model.NameOfYourProperty)

answered Jan 13, 2021 at 9:46

Hrvoje

15.4k11 gold badges103 silver badges121 bronze badges

Collectives™ on Stack Overflow

How to render HTML string in ASP.NET MVC?

2 Answers 2

7 Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

7 Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related