make serverside strings safe for use in clientside scripts

Question

i need to show the server exception in client browser, but it seems there are some illegal characters inside the exp.Message which makes the client script to raise "unterminated string literal" error. any idea to make strings such as exp.Message safe for client scripts?

    catch (Exception exp)
    {
      string __script = string.Format(@"alert('{0}');", exp.Message);
      ScriptManager.RegisterStartupScript(this, this.GetType(), "theError", __script, true);
    }

Answer 1

Try HttpUtility.HtmlEncode

using System.Web;

...

var encodedMessage = HttpUtility.HtmlEncode(exp.Message);
string __script = string.Format(@"alert('{0}');", encodedMessage);

Answer 2

after a lot of search, finally found a solution in rick strahl's blog: EncodeJsString