Escape variable for JavaScript in asp.net

Question

I have the following code in asp.net:

string backToParentFunc = string.Format("backToParent('{0}', '{1}', '{2}', '{3}');",
                                              Server.UrlEncode(login),
                                              Server.UrlEncode(firstName),
                                              Server.UrlEncode(lastName),
                                              Server.UrlEncode(email);
ScriptManager.RegisterStartupScript(this, GetType(), "backToParent", backToParentFunc, true);

Of course it stops working when the "lastName" variable contains ['] symbol (O'Connell). How to correctly escape strings in asp.net to make them appear correctly in JavaScript code?

Michael Liu · Accepted Answer · 2012-02-20 15:18:57Z

4

Consider using the JavaScriptEncode method from the Microsoft Anti-Cross Site Scripting Library.

answered Feb 20, 2012 at 15:18

Michael Liu

55.8k14 gold badges126 silver badges158 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

bang · Accepted Answer · 2012-02-20 15:13:10Z

0

You can do a lastName.Replace("'", "\"").

answered Feb 20, 2012 at 15:13

bang

5,2711 gold badge28 silver badges31 bronze badges

2 Comments

Ruslan Over a year ago

thanks, but I'm looking for a generic escaping method, not only for ['] symbol.

Nick Bork Over a year ago

You have to escape the escape, \\' not just \'

Collectives™ on Stack Overflow

Escape variable for JavaScript in asp.net

2 Answers 2

Comments

2 Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

2 Comments

Your Answer

Sign up or log in

Post as a guest

Related