引用C＃变量时如何处理JavaScript中的双引号

Question

I'm needing to call a JavaScript function that takes in a string variable that could have double quotes in it. Here's how I pass my variable into the JavaScript function:

onclick="copyDescription('<%# Eval("Description") %>');"

The problem is the function never fires because it doesn't like the quotes that might be in the 'Description' variable.

'Description', for example, could be:

VALVE BALL 1" 2000 RP THRD NACE SS BALON LS-10561

If I remove the double quote from the above description, it works great. I further tested this out by doing the following, and it worked as expected:

        $(document).ready(function () {
        var str = 'VALVE BALL 1" 2000 RP THRD NACE SS BALON LS-10561';
        copyDescription(str);
    });

I tried doing a .replace('"','\\"') and a .replace('"','') via JavaScript, but neither worked. I can remove the quotes by modifying the C# code that gets the value to remove the double quote, and it works. Just not through JavaScript. Any ideas?

Answer 1

The problem is that the " is terminating the HTML attribute and cutting off the JS mid-statement.

Double quotes must be represented as " in attribute values delimited by double quotes.

Answer 2

使用Microsoft反跨站点脚本库并在字符串上调用函数JavaScriptEncode()

Answer 3

The solution I went with which was the answer to my question was to use:

onclick="copyDescription('<%# Server.HtmlEncode(Eval("Description").ToString()) %>');"

Server.HtmlEncode works how I need it to.

Thanks everyone for your help and answers!

Answer 4

Have that Eval call output JSON instead or plaintext. That'll take care of any embedded Javascript metacharacters. I don't know how that'd be done in C#, but in PHP it's simply:

 onclick="copyDescription(<?php echo json_encode(...) ?>);"