asp.net mvc. Inserting string data from model into javascript. best-practice

Question

Hello everybody,

I have to populate javascript code in html layout (hidden fields, method params) with string data from model.

Html.Encode is not appropriate for my task because it encodes ' symbol, bypass : (that ruines object attributes declaration) and so on.

I wrote static helper class that is used from View like this:

  alert('<%=ViewHelper.MakeJavaScriptSafe(Model.Message)%>');

I hope there is asp.net in-built function I don't know about for this task. Does it exist really?

Thank you in advance.

Answer 1

I believe what you are looking for is an Anti-Cross Site Scripting library, like this one.