EmbeddingJavaScriptStringsfromanASP.NETPage

303 291

I'mlookingatapieceofcodethat'sacustomcontrolthatembedsabitofJavaScriptintoapage.PartofthisJavaScriptisgeneratingsomestaticstringtextdirectlyintothepage.I'vebeenrunningthiscodeforawhilenowaspartofanapplicationI'mworkingonwithacustomer.

ButacoupleofdaysagoIranintoacoupleofproblemswiththiscontrolandasitturnsouttheproblemisthattheJavaScriptstringsembeddedintotheHTMLstreamaren'tproperlyencoded.Thecodeusedissomethinglikethis(grosslysimplified):

stringmarkup="SomeText";stringscript=@"embedHtml("{0}");functionembedHtml(result){{alert(result)}}";this.Page.ClientScript.RegisterStartupScript(typeof(Page),"embedHtml",string.Format(script,markup),true);Theideaisthatthecodegetssometextthatcomesfromtheserversideandgetsembeddedintothepage.Theclientscriptbasicallytakestheembeddedstringanddisplaysitwhenthepageloads(therealthingembedsabunchofHTMLintothepageindynamicpositionsbutsameidea).

Canyouspottheproblem

Actuallythisisallfineanddandywiththecodeabove.Itworksfine.

Butitstartsbecomingaproblemifthetextthatyouareembeddingcontainsspecialcharacters.Saythestringthatyouembedcontainscarriagereturns,extendedcharactersormaybemorepertinently-doublequotes(whichiswhatblewmycodeuporiginallynotsurprisinglysincetheembeddedstringcontainedHTML).

ForexampletakethisC#stringassignmentontheserver:

stringmarkup="Hello\"Rick\"\r\nRockOn";whichwhengeneratedintotheclientsidewiththecodeaboveresultsin:

embedHtml("Hello"Rick"RockOn");whichclearlyisgoingtocauseaJavaScripterrorwhenthepageloads.

Theproblemisthatusing

embedHtml("{0}");or

embedHtml('{0}');isastringliteralandithastobeembeddedintothepageproperlyorelsecodewillblowupsporadicallyascertaincharactersarepartofthestringsembedded.

Thefixforthisistoencodethestringtoembed.TheeasiestwaytouseproperJavaScriptstringencodingistouseJSONencodingonthestringandyoucandothatwiththefollowingcode:

///

///Encodesastringtoberepresentedasastringliteral.Theformat///isessentiallyaJSONstring.//////Thestringreturnedincludesouterquotes///ExampleOutput:"Hello\"Rick\"!\r\nRockon"/////////publicstaticstringEncodeJsString(strings){StringBuildersb=newStringBuilder();sb.Append("\"");foreach(charcins){switch(c){case'\"':sb.Append("\\\"");break;case'\\':sb.Append("\\\\");break;case'\b':sb.Append("\\b");break;case'\f':sb.Append("\\f");break;case'\n':sb.Append("\\n");break;case'\r':sb.Append("\\r");break;case'\t':sb.Append("\\t");break;default:inti=(int)c;if(i<32||i>127){sb.AppendFormat("\\u{0:X04}",i);}else{sb.Append(c);}break;}}sb.Append("\"");returnsb.ToString();}

Sonowwecanchangethecodeto:

stringmarkup=wwWebUtils.EncodeJsString("Hello\"Rick\"\r\nRockOn");stringscript=@"embedHtml({0});functionembedHtml(result){{alert(result)}}";this.Page.ClientScript.RegisterStartupScript(typeof(Page),"embedHtml",string.Format(script,markup),true);Andvoila-thatworkscorrectly.TheembeddedstringintheJavaScriptnowlookslikethis:

"Hello\"Rick\"\r\nRockOn"

NotethattheembedHtml({0})codehasremovedthequotesaroundtheformat/replaceparameterasEncodeJsStringwillcreatethestringwithquotesarounditsothere'snoambiguityaboutwhichstringdelimiterstouse.Thiscanalsoreducethecomplexityofcodethatrequiresnestedstringexpressions.

Thissamelogicappliesifyouusescriptexpressionsinsideofapage:

alert(<%=wwWebUtils.EncodeJsString("MynameisSam\r\nRollon")%>);OneplacewhereI'veactuallyusedthisalotinthepastisforclientscriptlocalization.Ifyoudosomethinglikethisforexample:

alert(<%=HttpContext.GetGlobalResourceObject("Resources","WarrantyDetail")%>);youcanrunintothesameencodingproblemsandthiscodeshouldbechangedto:

alert(<%=wwWebUtils.EncodeJsString(HttpContext.GetGlobalResourceObject("Resources","WarrantyDetail"))%>);Iknowalotofpeopletrulydisdain'legacy'ASPclassicscripttags,butinsomecases-localizationespecially-theyaretheeasiestandmostreadablewaytoaccomplishthetask.OfcoursethesamerulescouldbeimpliedwithaLabelorLiteralcontrolandencodingthetextexplicitlyincode.

I'verunintothisproblemonafewoccasionsmyselfandIseeitfrequentlyinotherpeople'scode.WhileitmaynotbeallthatcommontoembedstringliteralsintoJavaScriptwhenyoudoneedtodoitit'sveryimportanttoencodethestring.

It'stheselittledetailsthatareeasytomisswhenworkingwithJavaScriptsoI'dthoughtIpassthisonealong...Hopethishelpssomebodyout.

IsthereanequivalentmethodtoJavaScriptStringEncode()inthenewAspNetCorepackagesIneedthisfunctionalitybutwanttoavoidusingoldAspNetSystem.Webdependencies.

THE END

InternationalHealth&TravelMedicalInsurance

买保险interesting是什么梗？

年轻人的第一份保险指南

虎虎保险北美保险选购第一站

MY83保險網－把保險變簡單

N奥本火花塞I312卖OTECOo型圈302752SSS「火花塞」

EmbeddingJavaScriptStringsfromanASP.NETPage

Scala语法基础Frankdeng

中国平安

Thermallyassisteddelayedfluorescence(TADF):fluorescencedelayedisfluorescencedenied

BalisesetfiltresdegabaritintégrésDjangodocumentationDjango

CodeReviewMicrosoftLearn

Disclosurequalityvisà

IMPI命令

PHP:levenshtein

String(JavaSE17&JDK17)

i.MX6/7DDRStressTestTool

工控机专场,工控机商家多资料全面第18组

史上最全幼小学拼音字母教学视频教程免费下载[视频+PDF+练习+描红+试卷]

1.中国人民保险集团股份有限公司人保官网直销省更多,安全有保障,无中间环节,其他保险产品更优惠。优质理赔服务,享受与线下同等理赔服务,更可拥有网上投保专属特色服务;全国10万个网点,30万个专业理赔服务人员。方便快捷,条款、金额公开透明,自助选择,轻松对比,我的保险我做主。优惠享不停,网购http://www.epicc.com.cn/
2.福家享受imAppStore【在线投保】用户可以在首页的产品推荐中选购保险,也可以在保险商城选购。 【理赔服务】用户在APP内购买保险产生的保单,按照要求在线上传所需材料,便可以享受便捷的在线理赔服务。 【保单服务】用户可以在线查询保单进度,也可以享受在线的基本信息变更、保单退保、部分领取、满期领取、纸质保单申请、银行账户变更、挂失/解https://apps.apple.com/at/app/%E7%A6%8F%E5%AE%B6%E4%BA%AB%E5%8F%97/id1531669972
3.I\\u0027mstgifDoctorgif动图动态图表情包下载SOOGIF为您提供I\\u0027mgif动态图片,stgifDoctor动图表情包下载,还有更多关于I\\u0027m,st,gif,Doctor的动图内容,尽在SOOGIF。https://www.soogif.com/materialPage/Ehk1GESXLrU
4.VAK222KarlHeinz德国KaschkeComponents稍后GHIJKStober ED704USOM140+K203VG1090ED303U 15M cable Binzel246.0196.1控制器气动剪线钳lieske&ZydraGmbH INTERNORMEN CDB01.1C-SE-ENS-ENS-NNN-NNN-S2-S-NN-FW R911328085 Brinkmann type FH 427-A69-FKOQ= 38 l/min; p= 10 barQ=20 l/min; p= 30 barP= 5,5 kW Nenstrom I= 12https://m.afzhan.com/products/detail/7360669.html
5.TheFASTGalacticPlanePulsarSnapshotsurvey:I.ProjectThe FAST Galactic Plane Pulsar Snapshot survey: I. Project design and pulsar discoveries? J. L. Han, Chen Wang, P. F. Wang, Tao Wang, D. J. Zhou, Jing-Hai Sun, Yi Yan, Wei-Qi Su, Wei-Cong Jing, Xue ChenShow full author list ? 2021 National Astronomical Observatories, CAS https://iopscience.iop.org/article/10.1088/1674-4527/21/5/107
6.一种基于国产商用密码算法的快速保留数据格式加密计算方法与流程mradix (x)的计算长度为m的一个整数数组arr,遵循以下规则: [0037] 1.判断x应满足0≤x<radixm[0038] 2.从1开始到m递增,这个数组每个元素通过以下方式计算,即arr[i-1]=x mod radix [0039] x=li(x/radix) [0040] r为保留格式计算后输出数组 http://mip.xjishu.com/zhuanli/62/202210948413.html
7.无线电A类考试试题51CTO博客[I]LK0001 [Q]我国现行法律体系中专门针对无线电管理的最高法律文件及其立法机关是: [A]中华人民共和国无线电管理条例,国务院和中央军委 [B]中华人民共和国无线电管理办法,工业和信息化部 [C]中华人民共和国电信条例,国务院 [D]中华人民共和国业余无线电台管理办法,工业和信息化部 https://blog.51cto.com/ghostwritten/5345003
8.i∥一一一一一一一一一questel.pdf(19 )中华人民共和国国家知识产权局 I∥一一一一一一一一 一―∥∥― (12)发明专利 )授权公告号CN 1926108 B (10 (45)授权公告日 2010. 06. 09 (21)申请号 200480042322. 7 K ?扬松 (22)申请日 2004. 12. 30 (74)专利代理机构 中国专利代]里(香港)有限公 司 72001 (30)优先权数据 代理人林森https://max.book118.com/html/2018/0408/160649289.shtm
9.LVGL(6)显示中文设置,制作中文字库lvgl中文字库下载U+0044 D D 拉丁字母D U+0045 E E 拉丁字母E U+0046 F F 拉丁字母F U+0047 G G 拉丁字母G U+0048 H H 拉丁字母H U+0049 I I 拉丁字母I U+004A J J 拉丁字母J U+004B K K 拉丁字母K U+004C L L 拉丁字母L U+004D M &#077https://blog.csdn.net/qq_41650023/article/details/125269117
10."DSEG":7segmentand14U+0022"N/A" U+0024$N/A$ U+0025%N/A% U+0026&N/A& U+0027'N/A' U+0028(N/A( U+0029)N/A) U+002A*N/A* U+0043CCC U+0044DDD U+0045EEE U+0046FFF U+0047GGG U+0048HHH U+0049III U+004AJJJ U+004BKKK U+004CLLL U+004DMMM https://www.keshikan.net/fonts-e.html
11.THEPALOMARDISTANTCLUSTERSURVEY:I.THECLUSTERCATALOG(m m ) P is t(hr=ercd)i is the projected radial pro erential cluster luminosity le of Cluster 013 Cluster 011: GHO cluster 0027+0535 (also known as 00 ). Cluster 012: GHO https://arxiv.org/pdf/astro-ph/9511011
12.whatman中国官网whatman(沃特曼)第46页Rc1/8(操作气口按照0.4~0.6N?m安装塑料R1/8接头) 1. 使用N.C.型时,就算操作压力只有0.3MPa,但流体压力达到0.15 MPa以上,则需要把阀门全部打开。 2. 使用N.O.型或者双控型时,操作压力0.3 MPa下可在下述压力范围内使用。 发表在 滤纸 Fisher 电阻式铂金温度计11-661-22-赛默飞中国代理商 发表于2025年http://www.nimabao.com/archives/author/utopbio/page/46
13.WTFRadioWorldwide6925USB0027UTC18Jun202101:27 UTC - Going through another bit of a fade period. Station ID and onto the letter T in the record isle; 01:47 UTC - Station ID and onto the letter Z; P.S. The Zombies would have been a good choice for 'Z'. Note: 01:10 UTC - This is unrelated but interesting. I justhttps://www.hfunderground.com/board/index.php/topic,82948.msg269215.html
14.PMBOOK(第五版)中文项目管理经典书籍,PMP考试专用教材的PDF,买原书很贵的哦!这不是PPT,你拿到的将是整本书哦!快点下载吧! 上传者:KylinHunter时间:2008-09-24 PMbook 2008 项目管理专业书籍,经典,权威,有效!中文版方便阅读! 上传者:lcd1236时间:2012-04-26 PMBOOK第五版(中文).zip https://www.iteye.com/resource/xinjian1208-6253881
15.GitHubU+0046 F 46 LATIN CAPITAL LETTER F U+0047 G 47 LATIN CAPITAL LETTER G U+0048 H 48 LATIN CAPITAL LETTER H U+0049 I 49 LATIN CAPITAL LETTER I U+004A J 4a LATIN CAPITAL LETTER J U+004B K 4b LATIN CAPITAL LETTER K U+004C L 4c LATIN CAPITAL LETTER L U+004D M 4d LATIN CAPITAhttps://github.com/SeppPenner/NetCoreMQTTExampleJsonConfigHashedPasswords