HTML.Encode but preserve line breaks

Question

I take user input into a text area, store it and eventually display it back to the user.

In my View (Razor) I want to do something like this...

@Message.Replace("\n", "</br>")

This doesn't work because Razor Html Encodes by default. This is great but I want my line breaks.

If I do this I get opened up to XSS problems.

@Html.Raw(Message.Replace("\n", "</br>"))

What's the right way to handle this situation?

score 58 · Accepted Answer · edited Sep 24 '13 at 09:58

58

Use HttpUtility.HtmlEncode then do the replace.

@Html.Raw(HttpUtility.HtmlEncode(Message).Replace("\n", "<br/>"))

edited Sep 24 '13 at 09:58

Dominic Zukiewicz

8,258
8
43
61

answered Apr 06 '11 at 01:43

Richard Schneider

34,944
9
57
73

Awesome! been looking for this. – Grenville Dec 30 '15 at 16:45
3

For asp.net core I had to look for the escaped chars when doing the replace so below looks for both carriage return and line feed together `@Html.Raw(Html.Encode(output).Replace(" ", "
"))` – Jeff Jul 18 '17 at 06:51
This didnt work for me. I used this: @Html.Raw("Customer Name\nAddress".Replace("\n", "
")) – Yawahang Rai Dec 10 '21 at 08:43

score 13 · Answer 2 · answered May 31 '13 at 04:23

If you find yourself using this more than once it may be helpful to wrap it in a custom HtmlHelper like this:

namespace Helpers
{
    public static class ExtensionMethods
    {
        public static IHtmlString PreserveNewLines(this HtmlHelper htmlHelper, string message)
        {
            return message == null ? null : htmlHelper.Raw(htmlHelper.Encode(message).Replace("\n", "<br/>"));
        }
    }
}

You'll then be able to use your custom HtmlHelper like this:

@Html.PreserveNewLines(Message)

Keep in mind that you'll need to add a using to your Helpers namespace for the HtmlHelper to be available.

Thanks for this, I love HtmlHelpers and extension methods; makes for some fairly clean usage. Regarding namespaces, I tend to put my helpers in the System.Web.Mvc namespace. This saves me the trouble of constantly adding using statements by making it 'always available' throughout my app, and makes it easier to copy my helper code from project to project since I don't have to change the namespace. — Ben Brandt, Jun 11 '13 at 14:30

score 9 · Answer 3 · answered Apr 06 '11 at 01:42

9

You can encode your message, then display it raw. Something like:

@Html.Raw(Server.HtmlEncode(Message).Replace("\n", "<br/>"))

answered Apr 06 '11 at 01:42

Erik Funkenbusch

92,674
28
195
291

score 2 · Answer 4 · answered Oct 28 '16 at 08:54

For those who use AntiXssEncoder.HtmlEncode

As AntiXssEncoder.HtmlEncode encode the /r/n character to 
 so the statement should be

_mDraftMsgModel.wnItem.Description = AntiXssEncoder.HtmlEncode(draftModel.txtMsgContent, false).Replace("&#13;&#10;", "<br/>");

score 0 · Answer 5 · answered Jun 20 '18 at 04:26

In my case, my string contained html that I wanted to encode but I also wanted the HTML line breaks to remain in place. The code below turns the HTML line breaks in to \n then encodes everything. It then turns all instances of \n back in to HTML line breaks:

@Html.Raw(HttpUtility.HtmlEncode(message.Replace("<br/>", "\n").Replace("<br />", "\n")).Replace("\n", "<br/>"))

HTML.Encode but preserve line breaks

5 Answers5

Linked