Passing a parameter with an ampersand to a controller action method

Question

I have a view that displays a link of vendors, with a link to each vendor detail page

@foreach (var vendor in Model.Vendors)
{
    <li>
        <a href="/Vendors/@(vendor.Name)">@vendor.Name</a>
    </li>
}

One particular vendor is named "ABC Sales & Services" , so the link to their detail page is /Vendors/ABC Sales & Services . When I navigate to that url, I get this error:

A potentially dangerous Request.Path value was detected from the client (&).

Is there a way to get around this?

Answer 1

Add this to web.config 's httpRuntime :

<httpRuntime requestPathInvalidChars="&lt;,&gt;,*,%,:,\,?" />

By default that list includes & , you are simply removing it

Answer 2

您应该真正利用供应商的ID（希望您的数据库上有一个主键-数字/ GUID），而不是名称。

Answer 3

You should UrlEncode the vendor name:

<a href="/Vendors/@Url.Encode(vendor.Name)">@vendor.Name</a>

By the way, this is done on your behalf when you use Url.Action or the Html.Action methods to construct your anchor tags

Answer 4

您可以使用

<a href="@Url.Action("/Vendors/" + @vendor.Name)">@vendor.Name</a>