display line breaks asp.net mvc razor

Question

I'm using the following to make the text output the line breaks entered in a <textarea> HTML element.

MvcHtmlString.Create(Model.Post.Description.Replace(Environment.NewLine, "<br />"))

Is there a nicer way to do this?

I don't really see how this helper outputs any line breaks as you are replacing line breaks with a space. — Darin Dimitrov, Mar 11 '11 at 18:12
dup http://stackoverflow.com/questions/5032097/asp-net-mvc-convert-n-new-line-to-html-breaks — BlackTigerX, Mar 11 '11 at 18:24
Does this answer your question? [Replace line break characters with
in ASP.NET MVC Razor view](https://stackoverflow.com/questions/4220381/replace-line-break-characters-with-br-in-asp-net-mvc-razor-view) — avs099, Sep 28 '20 at 15:54

Leniel Maccaferri · Accepted Answer · 2013-01-11T04:03:16.807

96

There's an even better/awesome solution that employs CSS white-space property:

Using this you avoid Cross-site scripting (XSS) vulnerabilities...

<p style="white-space: pre-line">@Model.Message</p>

Works like a charm with ASP.NET MVC Razor engine.

edited Jan 11 '13 at 04:03

answered Jan 11 '13 at 02:02

Leniel Maccaferri

97,176
43
357
461

7

This should be in fact the accepted answer. Because the op ask for a nicer way ! – rjso Jan 08 '15 at 16:02

score 23 · Answer 2 · answered Mar 11 '11 at 18:17

Your code is vulnerable to XSS attacks as it doesn't HTML encode the text. I would recommend you the following:

var result = string.Join(
    "<br/>",
    Model.Post.Description
        .Split(new[] { Environment.NewLine }, StringSplitOptions.None)
        .Select(x => HttpUtility.HtmlEncode(x))
);
return MvcHtmlString.Create(result);

and then in your view you can safely:

@Html.SomeHelper()

score 5 · Answer 3 · answered Mar 11 '11 at 18:13

5

Maybe you can output the text inside a <pre> tag.

answered Mar 11 '11 at 18:13

willvv

8,179
15
64
98

Abhishek Kanrar · Answer 4 · 2019-01-23T07:29:20.157

3

Just use a tag. <pre>@Model.Post.Description</pre>

Or

@Html.Raw(HttpUtility.HtmlDecode(Model.Post.Description.Replace("\r\n", "<br>")))

edited Jan 23 '19 at 07:29

answered Jan 23 '19 at 05:51

Abhishek Kanrar

342
2
5

score 0 · Answer 5 · answered Feb 25 '13 at 18:25

0

It's working for me.

<p class="message">
@Html.Raw("<p>" + Model.Text + "</p>")
</p>

string Model.Text having < br/> tag inside.

answered Feb 25 '13 at 18:25

Nalan Madheswaran

9,210
1
52
39

3

That is open to XSS attack. Place `` into you `Model.Text` and you have a vuln. – trailmax Jan 27 '15 at 22:15
@trailmax then come with a better solution – JHBonarius Sep 10 '20 at 12:00

score 0 · Answer 6 · answered Mar 28 '17 at 09:47

Here is my solution.

@MvcHtmlString.Create(Regex.Replace(Html.Encode(Model.Address), Environment.NewLine, "<br />", RegexOptions.Multiline))

and of course, you will have to add following using statement for Regex to work.

@using System.Text.RegularExpressions

Hope it is useful for someone.

score 0 · Answer 7 · answered Mar 24 '21 at 01:56

0

Just do the following command as it has filtering enabled:

<p style="white-space: pre-line" <p>

answered Mar 24 '21 at 01:56

Australia001

1

How is this different form the accepted answer? – Chris Catignani Mar 24 '21 at 04:56

display line breaks asp.net mvc razor

7 Answers7

Linked