How do I pass string data containing HTML tags to MVC action?

Question

0.00/5 (No votes)

See more:

how do I pass string data containing html

"<table><tr><td>Time</td><td>greetings</td></tr><tr><td>morning</td><td>Good morning</td></tr></tr><tr><td>Day</td><td>Good afternoon</td></tr></table>" 

into my mvc via ajax post ?

What I have tried:

$.ajax({
           url: "/home/Receive",

           type: 'POST',
           data: data

       }).done(function (response) {
           if (response.length > 0) {
               console.log(response);
           }
           else {
               alert('Error saving comments. Please try again.');
           }
       });

Posted 27-Feb-18 11:40am

istudent

Updated 27-Feb-18 16:52pm

Add a Solution

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Karthik_Mahalingam · Accepted Answer · 2018-02-27T16:53:00

Solution 1

try

$.ajax({
    url: "/Home/Receive",
    type: 'POST',
    data: JSON.stringify({ 'htmlData': htmlData }),
    dataType: "json",
    traditional: true,
    contentType: "application/json; charset=utf-8",

}).done(function (response) {

Posted 27-Feb-18 16:53pm

Karthik_Mahalingam

Comments

istudent 27-Feb-18 22:55pm

I just read about javascript injection attack. What would be the best approach to pass the html tags to action?

Karthik_Mahalingam 27-Feb-18 22:56pm

this will pass as string data and using it for PDF generation, then there is no vulnerability.
Google : xss attack mvc

istudent 27-Feb-18 23:00pm

this worked, but do i have to be worry ? my concern only

Karthik_Mahalingam 27-Feb-18 23:03pm

unless you are treating the data as a string, there is no issue, if you are storing the data and retrieving later to populate in UI, then you will have to worry about xss

How to Handle Cross-Site Scripting in ASP.NET MVC Application?[^]
What is cross site script attack[^]
read these, you will get some idea, since yours is an ajax request so not much to worry.

istudent 27-Feb-18 23:03pm

Thank you sir.

Karthik_Mahalingam 27-Feb-18 23:06pm

welcome, btw delete the prev question.

istudent 27-Feb-18 23:16pm

I think i have deleted the previous question. let me double check sir