blocks|key|1371417|text|唯一非法的字符是&、<和>+(以及属性中的"或'，这取决于用于分隔属性值的字符：attr="must+use+&quot;+here,+'+is+allowed"和attr='must+use+&apos;+here,+"+is+allowed')。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1371418|它们是使用XML+entities进行转义的，在本例中，您需要将&amp;用于&。|1371419|不过，实际上，您应该使用一个工具或库来为您编写XML，并为您抽象出这类东西，这样您就不必担心它了。|1371420|entityMap|0|LINK|mutability|MUTABLE|url|http://en.wikipedia.org/wiki/List_of_XML_and_HTML_character_entity_references^0|8|1|A|1|C|1|L|1|N|1|14|15|2A|15|0|W|5|13|1|5|C|0|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@$9|S|A|T|B|C]|$9|U|A|V|B|C]|$9|W|A|X|B|C]|$9|Y|A|Z|B|C]|$9|10|A|11|B|C]|$9|12|A|13|B|C]|$9|14|A|15|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|16|8|@$9|17|A|18|B|C]|$9|19|A|1A|B|C]]|D|@$9|1B|A|1C|1|1D]]|E|$]]|$1|H|3|I|5|6|7|1E|8|@]|D|@]|E|$]]|$1|J|3|-4|5|6|7|1F|8|@]|D|@]|E|$]]]|K|$L|$5|M|N|O|E|$P|Q]]]]

The only illegal characters are <code>&amp;</code>, <code>&lt;</code> and <code>&gt;</code> (as well as <code>&quot;</code> or <code>'</code> in attributes, depending on which character is used to delimit the attribute value: <code>attr=&quot;must use &amp;quot; here, ' is allowed&quot;</code> and <code>attr='must use &amp;apos; here, &quot; is allowed'</code>).
They're escaped using <a href="http://en.wikipedia.org/wiki/List_of_XML_and_HTML_character_entity_references" rel="noreferrer">XML entities</a>, in this case you want <code>&amp;amp;</code> for <code>&amp;</code>.
Really, though, you should use a tool or library that writes XML for you and abstracts this kind of thing away for you so you don't have to worry about it.

blocks|key|1586586|text|有效字符的列表在XML+specification中|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1586587|Char+++++++::=++++++#x9+%7C+#xA+%7C+#xD+%7C+[#x20-#xD7FF]+%7C+[#xE000-#xFFFD]+%7C+[#x10000-#x10FFFF]++/*+any+Unicode+character,+excluding+the+surrogate+blocks,+FFFE,+and+FFFF.+*/|code-block|syntax|javascript|1586588|entityMap|0|LINK|mutability|MUTABLE|url|http://www.w3.org/TR/xml/#charsets^0|8|H|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

The list of valid characters is in the <a href="http://www.w3.org/TR/xml/#charsets">XML specification</a>:

<pre><code>Char ::= #x9 | #xA | #xD | [#x20-#xD7FF] | [#xE000-#xFFFD] | [#x10000-#x10FFFF] /* any Unicode character, excluding the surrogate blocks, FFFE, and FFFF. */
</code></pre>

blocks|key|1586599|text|这是一段C#代码，用于从字符串中删除XML无效字符并返回新的有效字符串。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1586600|public+static+string+CleanInvalidXmlChars(string+text)+
{+
++++//+From+xml+spec+valid+chars:+
++++//+#x9+%7C+#xA+%7C+#xD+%7C+[#x20-#xD7FF]+%7C+[#xE000-#xFFFD]+%7C+[#x10000-#x10FFFF]+++++
++++//+any+Unicode+character,+excluding+the+surrogate+blocks,+FFFE,+and+FFFF.+
++++string+re+=+@"[%5E\x09\x0A\x0D\x20-\uD7FF\uE000-\uFFFD\u10000-\u10FFFF]";+
++++return+Regex.Replace(text,+re,+"");+
}|code-block|syntax|javascript|1586601|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

This is a C# code to remove the XML invalid characters from a string and return a new valid string.

<pre><code>public static string CleanInvalidXmlChars(string text) 
{ 
 // From xml spec valid chars: 
 // #x9 | #xA | #xD | [#x20-#xD7FF] | [#xE000-#xFFFD] | [#x10000-#x10FFFF] 
 // any Unicode character, excluding the surrogate blocks, FFFE, and FFFF. 
 string re = @"[^\x09\x0A\x0D\x20-\uD7FF\uE000-\uFFFD\u10000-\u10FFFF]"; 
 return Regex.Replace(text, re, ""); 
}
</code></pre>

blocks|key|1371397|text|预声明的字符为：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1371398|&+<+>+"+'|code-block|syntax|javascript|1371399|有关更多信息，请参阅What+are+the+special+characters+in+XML?。|offset|length|1371400|entityMap|0|LINK|mutability|MUTABLE|url|http://xml.silmaril.ie/specials.html^0|0|0|A|13|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@$I|V|J|W|1|X]]|A|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

The predeclared characters are:

<pre><code>&amp; &lt; &gt; " '
</code></pre>

See "<a href="http://xml.silmaril.ie/specials.html" rel="nofollow noreferrer">What are the special characters in XML?</a>" for more information.

blocks|key|1371650|text|在C#中删除不正确的XML字符的另一种方法是使用XmlConvert.IsXmlChar+(从.NET+Framework4.0开始提供)|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1371651|public+static+string+RemoveInvalidXmlChars(string+content)
{
+++return+new+string(content.Where(ch+=>+System.Xml.XmlConvert.IsXmlChar(ch)).ToArray());
}|code-block|syntax|javascript|1371652|或者您可以检查所有字符是否都是XML有效的：|1371653|public+static+bool+CheckValidXmlChars(string+content)
{
+++return+content.All(ch+=>+System.Xml.XmlConvert.IsXmlChar(ch));
}|1371654|.Net+Fiddle|1371655|例如，垂直制表符(\v)对于XML无效，它是有效的UTF-8，但不是有效的XML1.0，甚至很多库(包括libxml2)都没有使用它，而是默默地输出无效的XML。|1371656|entityMap|0|LINK|mutability|MUTABLE|url|https://msdn.microsoft.com/en-us/library/system.xml.xmlconvert.isxmlchar%2528v=vs.110%2529.aspx?f=255&MSPPError=-2147217396|1|https://dotnetfiddle.net/v1TNus^0|O|K|O|K|0|0|0|0|0|0|B|1|0|9|2|0^^$0|@$1|2|3|4|5|6|7|12|8|@$9|13|A|14|B|C]]|D|@$9|15|A|16|1|17]]|E|$]]|$1|F|3|G|5|H|7|18|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|19|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|1A|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|1B|8|@]|D|@$9|1C|A|1D|1|1E]]|E|$]]|$1|Q|3|R|5|6|7|1F|8|@$9|1G|A|1H|B|C]]|D|@]|E|$]]|$1|S|3|-4|5|6|7|1I|8|@]|D|@]|E|$]]]|T|$U|$5|V|W|X|E|$Y|Z]]|10|$5|V|W|X|E|$Y|11]]]]

Another way to remove incorrect XML chars in C# is using <a href="https://msdn.microsoft.com/en-us/library/system.xml.xmlconvert.isxmlchar%28v=vs.110%29.aspx?f=255&amp;MSPPError=-2147217396" rel="nofollow noreferrer"><code>XmlConvert.IsXmlChar</code></a> (Available since .NET Framework 4.0)

<pre><code>public static string RemoveInvalidXmlChars(string content)
{
 return new string(content.Where(ch =&gt; System.Xml.XmlConvert.IsXmlChar(ch)).ToArray());
}
</code></pre>

or you may check that all characters are XML-valid:

<pre><code>public static bool CheckValidXmlChars(string content)
{
 return content.All(ch =&gt; System.Xml.XmlConvert.IsXmlChar(ch));
}
</code></pre>

<a href="https://dotnetfiddle.net/v1TNus" rel="nofollow noreferrer">.Net Fiddle</a>

For example, the vertical tab symbol (<code>\v</code>) is not valid for XML, it is valid UTF-8, but not valid XML 1.0, and even many libraries (including libxml2) miss it and silently output invalid XML.

blocks|key|1371496|text|在C#中避开可能不需要的XML+/+XHTML字符的另一种简单方法是：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1371497|WebUtility.HtmlEncode(stringWithStrangeChars)|code-block|syntax|javascript|1371498|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Another easy way to escape potentially unwanted XML / XHTML chars in C# is:

<pre><code>WebUtility.HtmlEncode(stringWithStrangeChars)
</code></pre>

blocks|key|1586681|text|对于使用Java语言的人来说，Apache有一个实用程序类(StringEscapeUtils)，它有一个辅助方法escapeXml，可用于通过XML实体转义字符串中的字符。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1586682|entityMap^0|U|H|1L|9|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]|$9|K|A|L|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|M|8|@]|D|@]|E|$]]]|G|$]]

For Java folks, Apache has a utility class (<code>StringEscapeUtils</code>) that has a helper method <code>escapeXml</code> which can be used for escaping characters in a string using XML entities.

blocks|key|1586846|text|"XmlWriter+and+lower+ASCII+characters“对我很管用|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1586847|string+code+=+Regex.Replace(item.Code,+@"[\u0000-\u0008,\u000B,\u000C,\u000E-\u001F]",+"");|code-block|syntax|javascript|1586848|entityMap|0|LINK|mutability|MUTABLE|url|https://weblog.west-wind.com/posts/2012/Jan/02/XmlWriter-and-lower-ASCII-characters^0|1|10|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

"<a href="https://weblog.west-wind.com/posts/2012/Jan/02/XmlWriter-and-lower-ASCII-characters" rel="nofollow noreferrer">XmlWriter and lower ASCII characters</a>" worked for me

<pre><code>string code = Regex.Replace(item.Code, @"[\u0000-\u0008,\u000B,\u000C,\u000E-\u001F]", "");
</code></pre>

blocks|key|1586704|text|在Woodstox+XML处理器中，无效字符按以下代码进行分类：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1586705|if+(c+==+0)+{
++++throw+new+IOException("Invalid+null+character+in+text+to+output");
}
if+(c+<+'+'+%7C%7C+(c+>=+0x7F+&&+c+<=+0x9F))+{
++++String+msg+=+"Invalid+white+space+character+(0x"+%2B+Integer.toHexString(c)+%2B+")+in+text+to+output";
++++if+(mXml11)+{
++++++++msg+%2B=+"+(can+only+be+output+using+character+entity)";
++++}
++++throw+new+IOException(msg);
}
if+(c+>+0x10FFFF)+{
++++throw+new+IOException("Illegal+unicode+character+point+(0x"+%2B+Integer.toHexString(c)+%2B+")+to+output;+max+is+0x10FFFF+as+per+RFC");
}
/*
+*+Surrogate+pair+in+non-quotable+(not+text+or+attribute+value)+content,+and+non-unicode+encoding+(ISO-8859-x,
+*+Ascii)?
+*/
if+(c+>=+SURR1_FIRST+&&+c+<=+SURR2_LAST)+{
++++throw+new+IOException("Illegal+surrogate+pair+--+can+only+be+output+via+character+entities,+which+are+not+allowed+in+this+content");
}
throw+new+IOException("Invalid+XML+character+(0x"%2BInteger.toHexString(c)%2B")+in+text+to+output");|code-block|syntax|javascript|1586706|来源：here|offset|length|1586707|entityMap|0|LINK|mutability|MUTABLE|url|http://www.docjar.com/html/api/com/ctc/wstx/sw/XmlWriter.java.html^0|0|0|3|4|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@$I|V|J|W|1|X]]|A|$]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

In the Woodstox XML processor, invalid characters are classified by this code:

<pre><code>if (c == 0) {
 throw new IOException("Invalid null character in text to output");
}
if (c &lt; ' ' || (c &gt;= 0x7F &amp;&amp; c &lt;= 0x9F)) {
 String msg = "Invalid white space character (0x" + Integer.toHexString(c) + ") in text to output";
 if (mXml11) {
 msg += " (can only be output using character entity)";
 }
 throw new IOException(msg);
}
if (c &gt; 0x10FFFF) {
 throw new IOException("Illegal unicode character point (0x" + Integer.toHexString(c) + ") to output; max is 0x10FFFF as per RFC");
}
/*
 * Surrogate pair in non-quotable (not text or attribute value) content, and non-unicode encoding (ISO-8859-x,
 * Ascii)?
 */
if (c &gt;= SURR1_FIRST &amp;&amp; c &lt;= SURR2_LAST) {
 throw new IOException("Illegal surrogate pair -- can only be output via character entities, which are not allowed in this content");
}
throw new IOException("Invalid XML character (0x"+Integer.toHexString(c)+") in text to output");
</code></pre>

Source from <a href="http://www.docjar.com/html/api/com/ctc/wstx/sw/XmlWriter.java.html" rel="nofollow noreferrer">here</a>

blocks|key|1371604|text|ampersand+(&)+is+escaped+to+&amp;

double+quotes+(")+are+escaped+to+&quot;

single+quotes+(')+are+escaped+to+&apos;+

less+than+(<)+is+escaped+to+&lt;+

greater+than+(>)+is+escaped+to+&gt;|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1371605|在C#中，使用System.Security.SecurityElement.Escape或System.Net.WebUtility.HtmlEncode对这些非法字符进行转义。|unstyled|offset|length|style|CODE|1371606|string+xml+=+"<node>it's+my+\"node\"+&+i+like+it+0x12+x09+x0A++0x09+0x0A+<node>";
string+encodedXml1+=+System.Security.SecurityElement.Escape(xml);
string+encodedXml2=+System.Net.WebUtility.HtmlEncode(xml);


encodedXml1
"&lt;node&gt;it&apos;s+my+&quot;node&quot;+&amp;+i+like+it+0x12+x09+x0A++0x09+0x0A+&lt;node&gt;"

encodedXml2
"&lt;node&gt;it&#39;s+my+&quot;node&quot;+&amp;+i+like+it+0x12+x09+x0A++0x09+0x0A+&lt;node&gt;"|1371607|entityMap^0|0|7|12|1A|W|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|P|8|@$G|Q|H|R|I|J]|$G|S|H|T|I|J]]|9|@]|A|$]]|$1|K|3|L|5|6|7|U|8|@]|9|@]|A|$B|C]]|$1|M|3|-4|5|F|7|V|8|@]|9|@]|A|$]]]|N|$]]

<pre><code>ampersand (&amp;) is escaped to &amp;amp;

double quotes (") are escaped to &amp;quot;

single quotes (') are escaped to &amp;apos; 

less than (&lt;) is escaped to &amp;lt; 

greater than (&gt;) is escaped to &amp;gt;
</code></pre>

In C#, use <code>System.Security.SecurityElement.Escape</code> or <code>System.Net.WebUtility.HtmlEncode</code> to escape these illegal characters.

<pre><code>string xml = "&lt;node&gt;it's my \"node\" &amp; i like it 0x12 x09 x0A 0x09 0x0A &lt;node&gt;";
string encodedXml1 = System.Security.SecurityElement.Escape(xml);
string encodedXml2= System.Net.WebUtility.HtmlEncode(xml);


encodedXml1
"&amp;lt;node&amp;gt;it&amp;apos;s my &amp;quot;node&amp;quot; &amp;amp; i like it 0x12 x09 x0A 0x09 0x0A &amp;lt;node&amp;gt;"

encodedXml2
"&amp;lt;node&amp;gt;it&amp;#39;s my &amp;quot;node&amp;quot; &amp;amp; i like it 0x12 x09 x0A 0x09 0x0A &amp;lt;node&amp;gt;"
</code></pre>

blocks|key|1371709|text|有人试过这个System.Security.SecurityElement.Escape(yourstring)吗？这将用有效的等效字符替换字符串中的无效XML字符。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1371710|entityMap^0|6|1E|0^^$0|@$1|2|3|4|5|6|7|H|8|@$9|I|A|J|B|C]]|D|@]|E|$]]|$1|F|3|-4|5|6|7|K|8|@]|D|@]|E|$]]]|G|$]]

Anyone tried this <code>System.Security.SecurityElement.Escape(yourstring)</code>?
This will replace invalid XML characters in a string with their valid equivalent.

blocks|key|1371467|text|对于XSL+(在真正懒惰的日子里)，我使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1371468|capture="&amp;(?!amp;)"+capturereplace="&amp;amp;"|code-block|syntax|javascript|1371469|把所有没有跟在后面的符号翻译成合适的符号。|1371470|在某些情况下，输入是CDATA，但是使用XML的系统没有考虑到它。这是一个草率的修复，当心..。|1371471|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

For XSL (on really lazy days) I use:

<pre><code>capture="&amp;amp;(?!amp;)" capturereplace="&amp;amp;amp;"
</code></pre>

to translate all &amp;-signs that aren't follwed på amp; to proper ones.

We have cases where the input is in CDATA but the system which uses the XML doesn't take it into account. It's a sloppy fix, beware...

I am working with some XML that holds strings like:

<pre><code>&lt;node&gt;This is a string&lt;/node&gt;
</code></pre>

Some of the strings that I am passing to the nodes will have characters like <code>&amp;</code>, <code>#</code>, <code>$</code>, etc.:

<pre><code>&lt;node&gt;This is a string &amp; so is this&lt;/node&gt;
</code></pre>

This is not valid due to <code>&amp;</code>.

I cannot wrap these strings in CDATA as they need to be as they are. I tried looking for a list of characters that cannot be put in XML nodes without being in a CDATA.

Can someone point me in the direction of one or provide me with a list of illegal characters?

What are invalid characters in XML

Java

我正在使用一些包含如下字符串的XML：<node>This is a string</node>我传递给节点的一些字符串将包含诸如&、#、$等字符：<node>This is a string & so is this</node>由于&，这是无效的。我不能将这些字符串包装在CDATA中，因为它们需要原样。我尝试查找不在CDATA中就不能放入XML节点中的字符列表。有没有人能给我指个方向，或者给我

问什么是XML中的无效字符
EN

回答 12

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问什么是XML中的无效字符EN

回答 12

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问什么是XML中的无效字符
EN