I'm making an application that involves logging into a server, however, the post data needs some encoding.
Dim strEncUsername As String = Server.HtmlEncode(Me.txtUsername.Text)
However, since this isn't an asp.net application, this doesn't work. How the hay am I supposed to do this? I tried looking for an Imports thing, but no real luck.
Converts a string to an HTML-encoded string. Converts a string into an HTML-encoded string, and returns the output as a TextWriter stream of output.
Any time you are trying to output data that could include untrusted html, you should use HTMLENCODE . Encodes text and merge field values for use in HTML by replacing characters that are reserved in HTML, such as the greater-than sign ( > ), with HTML entity equivalents, such as > .
WebUtility.HtmlDecode Method (System.Net)Converts a string that has been HTML-encoded for HTTP transmission into a decoded string.
HtmlEncode is a convenient way to access the HttpUtility. HtmlEncode method at run time from an ASP.NET application. Internally, HtmlEncode uses HttpUtility. HtmlEncode to encode strings. To encode or decode values outside of a web application, use the WebUtility class.
In a Windows application you can also use:
System.Net.WebUtility.HtmlEncode
providing the Framework version is 4 or above, see: [link]https://msdn.microsoft.com/en-us/library/ee388364(v=vs.110).aspx
If you add a reference to System.Web to your project you can use the following to html encode your string
Dim strEncUsername As String = System.Web.HttpUtility.HtmlEncode(Me.txtUsername.Text)
MSDN Documentation for HttpUtility.HtmlEncode
Edit
Screenshot of intellisense showing HtmlEncode:
Screenshot of references in project:
Output from application:
unsafe text: <em>evil em tags within</em>
safe text: <em>evil em tags within</em>
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With