如何在chrome中找到编码的html值？

Question

From Microsoft Docs

The Razor engine used in MVC automatically encodes all output sourced from variables So for the following razor view

@{
    var untrustedInput = "<\"123\">";
}

@untrustedInput

This view should output the contents of the untrustedInput variable. This variable includes some characters which are used in XSS attacks, namely <, " and >.

So my expectation was browser source code will show the encoded value as: <"123">

But instead I see the rendered value

Where would I actually see the encoded value in the browser?

Answer 1

Sorry I found it. I am looking at the wrong tab. If i open Network->my route->Response Tab. I see the encoded value