Javascript converts XML characters to &LT and &GT-CodePudding

The

How can I simply access a XML string in the database from the viewmodel while avoiding any unwanted conversions? Thanks.

Using @Html.Raw results in this problem:

The first line is read correctly but with each line break it reads as code instead of text. I put the original @Html.Raw in quotes, is there a way to prevent it from attempting to read it as code as shown above?

CodePudding user response：

It looks like you are struggling with HTML Encoding. Have you tried using @Html.Raw(Viewmodel.XML)? That helper should prevent MVC from HTML encoding the content.

Depending on where that XML content comes from, you might be creating an XSS risk, so be careful how you use Html.Raw and consider reading more about it if it does solve this problem for you Is there a risk in using @Html.Raw?

CodePudding user response：

I don't completely understand what kind of javascript environment you have here, because what you show is you read text and then you give it somewhere as XML, but whatever that XML is, will think you have a text node, or string, and then do all that XML escaping. It's not taking it as XML.

What data type does this dymo.label.framework.openLabelXml(labelXml) want for labelXml? Apparently not a string. But from here http://labelwriter.com/software/dls/sdk/docs/DYMOLabelFrameworkJavaScriptHelp/symbols/dymo.label.framework.html#.openLabelXml it says that labelXml is "The label definition as an XML string."

So, apparently the string has been previously damaged.

I have no idea what this @ notation is:

var labelXml = "@Viewmodel.XMLString";

to me and my javascript this labelXml is just a string with the characters @-V-i-e-w-m-o-d-e-l-.-X-M-L-S-t-r-i-n-g.

Nor do I know what this means:

<script id="label_XML" type="text/plain"> @Viewmodel.XML </script>

to me that is just a script element with the "@Viewmodel.XML" text as a string.

I am sure whatever that magic thing is, from your unknown database interface, that is destroying it already. It is assuming you want to output a text node, instead of XML.

Your dymo.label.framework.openLabelXml(labelXml) function wants a string of XML, unless they are lying.

One thing I would do is to actually check with console.log what this argument is that you pass. And I am sure it is already damaged.

Seems like your unknown database interface sucks or you're not using it right. I mean, what could be easier than getting a database column value as a string?