Using AntiXss to encode html Attribute in mvc

Question

I am trying to pass an id from my controller to my view and encode this value in the Antixss function but I am getting an error.

This is my code

input  type="hidden" name="Moderator" value="@AntiXss.HtmlAttributeEncode(ViewBag.ModeratorID)" readOnly="readonly" />

The error message is

The best overloaded method match for 'Microsoft.Security.Application.AntiXss.HtmlAttributeEncode(string)' has some invalid arguments

Is ModeratorID a string? Have you tried to append .ToString()? Such as ViewBag.ModeratorID.ToString() — Tommy
– Tommy, Commented Feb 5, 2014 at 15:37

Brandon · Accepted Answer · 2014-02-05 15:39:16Z

2

ViewBag is a dynamic type, so call ToString() on ModeratorID.

@AntiXss.HtmlAttributeEncode(ViewBag.ModeratorID.ToString())

answered Feb 5, 2014 at 15:39

Brandon

70.3k32 gold badges201 silver badges227 bronze badges

Sign up to request clarification or add additional context in comments.

1 Answer 1