Encodes input strings for use in XML.
Namespace: Microsoft.Security.Application
Assembly: AntiXssLibrary40 (in AntiXssLibrary40.dll) Version: 4.2.0.0
Syntax
C# |
---|
public static string XmlEncode( string input ) |
Visual Basic |
---|
Public Shared Function XmlEncode ( _ input As String _ ) As String |
Visual C++ |
---|
public: static String^ XmlEncode( String^ input ) |
Parameters
- input
- Type: System..::..String
String to be encoded.
Return Value
Encoded string for use in XML.Remarks
This function encodes all but known safe characters. Characters are encoded using &#DECIMAL; notation.
Safe characters include:
The safe list may be adjusted using MarkAsSafe(LowerCodeCharts, LowerMidCodeCharts, MidCodeCharts, UpperMidCodeCharts, UpperCodeCharts).
Example inputs and encoded outputs:
a-z | Lower case alphabet |
A-Z | Upper case alphabet |
0-9 | Numbers |
, | Comma |
. | Period |
- | Dash |
_ | Underscore |
Space |
alert('XSS Attack!'); | alert('XSS Attack!'); |
[email protected] | [email protected] |
Anti-Cross Site Scripting Library | Anti-Cross Site Scripting Library |