blocks|key|1289046|text|public+static+string+XmlEscape(string+unescaped)
{
++++XmlDocument+doc+=+new+XmlDocument();
++++XmlNode+node+=+doc.CreateElement("root");
++++node.InnerText+=+unescaped;
++++return+node.InnerXml;
}

public+static+string+XmlUnescape(string+escaped)
{
++++XmlDocument+doc+=+new+XmlDocument();
++++XmlNode+node+=+doc.CreateElement("root");
++++node.InnerXml+=+escaped;
++++return+node.InnerText;
}|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1289047|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>public static string XmlEscape(string unescaped)
{
 XmlDocument doc = new XmlDocument();
 XmlNode node = doc.CreateElement("root");
 node.InnerText = unescaped;
 return node.InnerXml;
}

public static string XmlUnescape(string escaped)
{
 XmlDocument doc = new XmlDocument();
 XmlNode node = doc.CreateElement("root");
 node.InnerXml = escaped;
 return node.InnerText;
}
</code></pre>

blocks|key|1503857|text|SecurityElement.Escape(string+s)|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1503858|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/system.security.securityelement.escape(VS.80).aspx^0|0|W|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

<a href="http://msdn.microsoft.com/en-us/library/system.security.securityelement.escape(VS.80).aspx" rel="noreferrer">SecurityElement.Escape(string s)</a>

blocks|key|1289316|text|感谢@sehe的一行转义：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1289317|var+escaped+=+new+System.Xml.Linq.XText(unescaped).ToString();|code-block|syntax|javascript|1289318|我在其中添加了一行不转义：|1289319|var+unescapedAgain+=+System.Xml.XmlReader.Create(new+StringReader("<r>"+%2B+escaped+%2B+"</r>")).ReadElementString();|1289320|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Thanks to @sehe for the one-line escape:

<pre><code>var escaped = new System.Xml.Linq.XText(unescaped).ToString();
</code></pre>

I add to it the one-line un-escape:

<pre><code>var unescapedAgain = System.Xml.XmlReader.Create(new StringReader("&lt;r&gt;" + escaped + "&lt;/r&gt;")).ReadElementString();
</code></pre>

blocks|key|1504075|text|如果你想，就像我发现这个问题时一样，转义XML节点名称，例如从XML序列化读取时，使用最简单的方法：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1504076|XmlConvert.EncodeName(string+nameToEscape)|code-block|syntax|javascript|1504077|它还将对XML元素的空格和任何无效字符进行转义。|1504078|http://msdn.microsoft.com/en-us/library/system.security.securityelement.escape%2528VS.80%2529.aspx|offset|length|1504079|entityMap|0|LINK|mutability|MUTABLE|url|http://msdn.microsoft.com/en-us/library/system.security.securityelement.escape%2528VS.80%2529.aspx^0|0|0|0|0|2M|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|W|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|X|8|@]|9|@$K|Y|L|Z|1|10]]|A|$]]|$1|M|3|-4|5|6|7|11|8|@]|9|@]|A|$]]]|N|$O|$5|P|Q|R|A|$S|T]]]]

And if you want, like me when I found this question, to escape XML node names, like for example when reading from an XML serialization, use the easiest way:

<pre><code>XmlConvert.EncodeName(string nameToEscape)
</code></pre>

It will also escape spaces and any non-valid characters for XML elements.

<a href="http://msdn.microsoft.com/en-us/library/system.security.securityelement.escape%28VS.80%29.aspx" rel="noreferrer">http://msdn.microsoft.com/en-us/library/system.security.securityelement.escape%28VS.80%29.aspx</a>

blocks|key|1289147|text|乔治，这很简单。始终使用XML来处理XML。他们为你做所有的转义和不转义。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1289148|永远不要通过附加字符串来创建XML。|1289149|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

George, it's simple. Always use the XML APIs to handle XML. They do all the escaping and unescaping for you.

Never create XML by appending strings.

blocks|key|1504146|text|警告:亡灵法术|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1504147|Darin+Dimitrov的答案%2BSystem.Security.SecurityElement.Escape(字符串s)仍然不完整。|1504148|在XML+1.1中，最简单、最安全的方法就是对所有内容进行编码。|1504149|例如\t的&#09;。|offset|length|style|CODE|1504150|在XML+1.0中根本不支持它。|1504151|对于XML+1.0，一种可能的解决方法是对包含字符的文本进行64进制编码。|1504152|//string+EncodedXml+=+SpecialXmlEscape("привет+мир");
//Console.WriteLine(EncodedXml);
//string+DecodedXml+=+XmlUnescape(EncodedXml);
//Console.WriteLine(DecodedXml);
public+static+string+SpecialXmlEscape(string+input)
{
++++//string+content+=+System.Xml.XmlConvert.EncodeName("\t");
++++//string+content+=+System.Security.SecurityElement.Escape("\t");
++++//string+strDelimiter+=+System.Web.HttpUtility.HtmlEncode("\t");+//+XmlEscape("\t");+//XmlDecode("&#09;");
++++//strDelimiter+=+XmlUnescape("&#59;");
++++//Console.WriteLine(strDelimiter);
++++//Console.WriteLine(string.Format("&#{0};",+(int)';'));
++++//Console.WriteLine(System.Text.Encoding.ASCII.HeaderName);
++++//Console.WriteLine(System.Text.Encoding.UTF8.HeaderName);


++++string+strXmlText+=+"";

++++if+(string.IsNullOrEmpty(input))
++++++++return+input;


++++System.Text.StringBuilder+sb+=+new+StringBuilder();

++++for+(int+i+=+0;+i+<+input.Length;+%2B%2Bi)
++++{
++++++++sb.AppendFormat("&#{0};",+(int)input[i]);
++++}

++++strXmlText+=+sb.ToString();
++++sb.Clear();
++++sb+=+null;

++++return+strXmlText;
}+//+End+Function+SpecialXmlEscape|code-block|syntax|javascript|1504153|XML+1.0：|1504154|public+static+string+Base64Encode(string+plainText)
{
++++var+plainTextBytes+=+System.Text.Encoding.UTF8.GetBytes(plainText);
++++return+System.Convert.ToBase64String(plainTextBytes);
}

public+static+string+Base64Decode(string+base64EncodedData)
{
++++var+base64EncodedBytes+=+System.Convert.FromBase64String(base64EncodedData);
++++return+System.Text.Encoding.UTF8.GetString(base64EncodedBytes);
}|1504155|entityMap^0|0|0|0|5|5|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|12|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|13|8|@$H|14|I|15|J|K]]|9|@]|A|$]]|$1|L|3|M|5|6|7|16|8|@]|9|@]|A|$]]|$1|N|3|O|5|6|7|17|8|@]|9|@]|A|$]]|$1|P|3|Q|5|R|7|18|8|@]|9|@]|A|$S|T]]|$1|U|3|V|5|6|7|19|8|@]|9|@]|A|$]]|$1|W|3|X|5|R|7|1A|8|@]|9|@]|A|$S|T]]|$1|Y|3|-4|5|6|7|1B|8|@]|9|@]|A|$]]]|Z|$]]

WARNING: Necromancing 

Still Darin Dimitrov's answer + System.Security.SecurityElement.Escape(string s) isn't complete.

In XML 1.1, the simplest and safest way is to just encode EVERYTHING. 
Like <code>&amp;#09;</code> for \t. 
It isn't supported at all in XML 1.0. 
For XML 1.0, one possible workaround is to base-64 encode the text containing the character(s).

<pre><code>//string EncodedXml = SpecialXmlEscape("привет мир");
//Console.WriteLine(EncodedXml);
//string DecodedXml = XmlUnescape(EncodedXml);
//Console.WriteLine(DecodedXml);
public static string SpecialXmlEscape(string input)
{
 //string content = System.Xml.XmlConvert.EncodeName("\t");
 //string content = System.Security.SecurityElement.Escape("\t");
 //string strDelimiter = System.Web.HttpUtility.HtmlEncode("\t"); // XmlEscape("\t"); //XmlDecode("&amp;#09;");
 //strDelimiter = XmlUnescape("&amp;#59;");
 //Console.WriteLine(strDelimiter);
 //Console.WriteLine(string.Format("&amp;#{0};", (int)';'));
 //Console.WriteLine(System.Text.Encoding.ASCII.HeaderName);
 //Console.WriteLine(System.Text.Encoding.UTF8.HeaderName);


 string strXmlText = "";

 if (string.IsNullOrEmpty(input))
 return input;


 System.Text.StringBuilder sb = new StringBuilder();

 for (int i = 0; i &lt; input.Length; ++i)
 {
 sb.AppendFormat("&amp;#{0};", (int)input[i]);
 }

 strXmlText = sb.ToString();
 sb.Clear();
 sb = null;

 return strXmlText;
} // End Function SpecialXmlEscape
</code></pre>

XML 1.0:

<pre><code>public static string Base64Encode(string plainText)
{
 var plainTextBytes = System.Text.Encoding.UTF8.GetBytes(plainText);
 return System.Convert.ToBase64String(plainTextBytes);
}

public static string Base64Decode(string base64EncodedData)
{
 var base64EncodedBytes = System.Convert.FromBase64String(base64EncodedData);
 return System.Text.Encoding.UTF8.GetString(base64EncodedBytes);
}
</code></pre>

blocks|key|1289218|text|下面的函数可以完成这项工作。没有对XmlDocument进行测试，但我想这要快得多。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1289219|public+static+string+XmlEncode(string+value)
{
++++System.Xml.XmlWriterSettings+settings+=+new+System.Xml.XmlWriterSettings+
++++{
++++++++ConformanceLevel+=+System.Xml.ConformanceLevel.Fragment
++++};

++++StringBuilder+builder+=+new+StringBuilder();

++++using+(var+writer+=+System.Xml.XmlWriter.Create(builder,+settings))
++++{
++++++++writer.WriteString(value);
++++}

++++return+builder.ToString();
}

public+static+string+XmlDecode(string+xmlEncodedValue)
{
++++System.Xml.XmlReaderSettings+settings+=+new+System.Xml.XmlReaderSettings
++++{
++++++++ConformanceLevel+=+System.Xml.ConformanceLevel.Fragment
++++};

++++using+(var+stringReader+=+new+System.IO.StringReader(xmlEncodedValue))
++++{
++++++++using+(var+xmlReader+=+System.Xml.XmlReader.Create(stringReader,+settings))
++++++++{
++++++++++++xmlReader.Read();
++++++++++++return+xmlReader.Value;
++++++++}
++++}
}|code-block|syntax|javascript|1289220|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Following functions will do the work. Didn't test against XmlDocument, but I guess this is much faster.

<pre><code>public static string XmlEncode(string value)
{
 System.Xml.XmlWriterSettings settings = new System.Xml.XmlWriterSettings 
 {
 ConformanceLevel = System.Xml.ConformanceLevel.Fragment
 };

 StringBuilder builder = new StringBuilder();

 using (var writer = System.Xml.XmlWriter.Create(builder, settings))
 {
 writer.WriteString(value);
 }

 return builder.ToString();
}

public static string XmlDecode(string xmlEncodedValue)
{
 System.Xml.XmlReaderSettings settings = new System.Xml.XmlReaderSettings
 {
 ConformanceLevel = System.Xml.ConformanceLevel.Fragment
 };

 using (var stringReader = new System.IO.StringReader(xmlEncodedValue))
 {
 using (var xmlReader = System.Xml.XmlReader.Create(stringReader, settings))
 {
 xmlReader.Read();
 return xmlReader.Value;
 }
 }
}
</code></pre>

Is there any C# function which could be used to escape and un-escape a string, which could be used to fill in the content of an XML element?

I am using VSTS 2008 + C# + .Net 3.0.

EDIT 1: I am concatenating simple and short XML file and I do not use serialization, so I need to explicitly escape XML character by hand, for example, I need to put <code>a&lt;b</code> into <code>&lt;foo&gt;&lt;/foo&gt;</code>, so I need escape string <code>a&lt;b</code> and put it into element foo.

String escape into XML

有没有什么C#函数可以用来转义和取消转义字符串，可以用来填充XML元素的内容？我使用的是VSTS2008+ C# + .Net 3.0。编辑1:我正在连接简单而简短的XML文件，并且我没有使用序列化，所以我需要手动显式转义XML字符，例如，我需要将a<b放入<foo></foo>中，所以我需要转义字符串a<b并将其放入元素foo中。

问将字符串转义为XML
EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问将字符串转义为XMLEN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问将字符串转义为XML
EN