Is it possible to display raw Html from database in ASP.NET MVC 3?

Question

I have a table in my db where one of the properties is an Html page (without the html, head and body tags), and I intend to put it in the middle of one of my views - say, I call a cotroller method that takes an argument, and return a view passing this html big string as the model. I searched for it (not much, I admit), and found the following method:

<%= System.Web.HttpUtility.HtmlDecode(yourEncodedHtmlFromYouDatabase) %>

That was found here in stackoverflow. When I tried a similar razor aproach, I ended up with this:

@System.Web.HttpUtility.HtmlDecode("<h1>Test</h1>")

That's the idea, but it didn't work quite as I planned.

What does yourEncodedHtmlFromYouDatabase look like? I'm guessing that the HTML <h1>Test</h1> would actually be encoded something like this: &lt:h1>Test&lt:/h1>. — Matt Ball
– Matt Ball, Commented Jan 25, 2011 at 20:18
Actually, it would be more like using tags. I don't have the db ready yet, but that's what we're planning to do, so I'm looking for options. — Bruno Machado - vargero
– Bruno Machado - vargero, Commented Jan 25, 2011 at 20:27
This question for MVC2: stackoverflow.com/questions/2169805/… — Michael Maddox
– Michael Maddox, Commented Aug 1, 2011 at 19:46

Bennor McCarthy · Accepted Answer · 2011-01-25 20:30:18Z

98

All you need is: @Html.Raw(yourEncodedHtmlFromYouDatabase)

I'm assuming that the html in the database has been properly sanitized (or at least from a reliable source), because if not, you could be opening yourself up to cross-site scripting attacks.

The reason your approach didn't work is that Razor HTML-encodes output by default (every time you use @ to display something). Html.Raw tells Razor that you trust the HTML and you want to display it without encoding it (as it's already raw HTML).

edited Jan 25, 2011 at 20:30

answered Jan 25, 2011 at 20:21

Bennor McCarthy

11.7k1 gold badge52 silver badges52 bronze badges

Sign up to request clarification or add additional context in comments.

1 Comment

Bruno Machado - vargero Over a year ago

Thank you very much. As for security, I believe there's no such problem, since we'll be building this html ourselves.

LiamB · Accepted Answer · 2011-10-15 12:03:57Z

12

You can also return a HTMLString and Razor will output the correct formatting, for example.

@Html.GetSomeHtml()

public static HtmlString GetSomeHtml()
{
    var Data = "abc<br/>123";
    return new HtmlString(Data);
}

This will allow you to display HTML

answered Oct 15, 2011 at 12:03

LiamB

18.6k19 gold badges79 silver badges122 bronze badges

Comments

Wael Galal El Deen · Accepted Answer · 2024-07-18 11:20:51Z

0

You can display the HTML content or any MarkupString as in a very simple way follows:

@((MarkupString)YourModel.HTMLDetails)

answered Jul 18, 2024 at 11:20

Wael Galal El Deen

1661 silver badge5 bronze badges

Collectives™ on Stack Overflow

Is it possible to display raw Html from database in ASP.NET MVC 3?

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

3 Answers 3

1 Comment

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related