ASP.NET（MVC2）中<％：％>做了什么？

Question

A coworker recently checked in a changeset where lots of expressions on the form <%= (...) %> were changed to <%: (...) %>.

I have a vague recollection of having heard what <%: does, but cannot remember. It's too late in the night to call my coworker, and Google and Bing both seem unable to search for the string "<%:".

Can someone enlighten me, please?

Answer 1

It HtmlEncodes the string, if it hasn't already been encoded.

The "hasn't already been encoded part" is why MvcHtmlString was introduced. MVC2 returns MvcHtmlString from many HtmlHelper methods to represent strings that should not be re-encoded. The <%: %> knows not to re-encode.

See What is an MvcHtmlString and when should I use it? for a good discussion.

Answer 2

它会自动将呈现的输出包装在Html.Encode（）中以避免脚本攻击。

Answer 3

One way to remember this is (courtesy: Scott Hanselman) think = as an closed gate. Now open the gate by turning it 90 degrees and see it from the same view. you will see :