如何在html eval中逃脱锚标记

Question

Can you please help in escaping this :

 <p><%# Eval("Text") + <a class="story-link" href="<%# GetDocumentUrl() %>" target="_self"><%# Eval("ReadFullStoryTitle") %></a> %>
         </p>

I have tried like below but its not working :

<p><%# Eval("Text") +  <a class="story-link" href="'<%# GetDocumentUrl() %>'" target="_self"><'%#Eval("ReadFullStoryTitle") %'></a> %></p>

Answer 1

您可以使用以下方法：

<p><%# Eval("Text") %> <a class="story-link" href='<%# GetDocumentUrl() %>' target="_self"><%#Eval("ReadFullStoryTitle") %></a></p>

Answer 2

You can add the data using javascripts innerText it will escape them properly.

 <p id="data"><script>document.getElementById('data') .innerText= '<%# Eval("Text") + <a class="story-link" href="<%# GetDocumentUrl() %>" target="_self"><%# Eval("ReadFullStoryTitle") %></a> %>';</script></p> 

You can also use css content property of after and ::after as follows

 #data::after{ content: '<%# Eval("Text") + <a class="story-link" href="<%# GetDocumentUrl() %>" target="_self"><%# Eval("ReadFullStoryTitle") %></a> %>'; } 

 <p id="data"></p> 

Or You can use the code in p tag below which is escaped.

 <p>&lt;%# Eval("Text") + &lt;a class="story-link" href="&lt;%# GetDocumentUrl() %&gt;" target="_self"&gt;&lt;%# Eval("ReadFullStoryTitle") %&gt;&lt;/a&gt; %&gt;</p>