blocks|key|2032282|text|来自http://weblogs.asp.net/leftslipper/archive/2007/06/29/how-asp-net-databinding-deals-with-eval-and-bind-statements.aspx的报价|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2032283|ASP.NET中没有绑定方法。当ASP.NET解析您的文件并看到您正在使用
它为它生成一些特殊的代码。当您使用时，它不是一个真正的函数调用。如果ASP.NET解析代码并检测到Bind()语句，它会将语句分成两部分。第一部分是单向绑定部分，它最终只是一个普通的Eval()调用。第二部分是反向部分，通常是一些代码，类似于"string+=+TextBox1.Text“，这些代码将值从绑定的位置取回来。但是，由于ASP.NET必须解析Bind()语句，所以双向绑定不支持Bind()以外的其他任何东西。例如，以下语法无效，因为它试图调用任意代码并同时使用Bind()：双向绑定中支持的唯一格式是Bind(“字段”)和Bind(“字段”，“格式字符串{0}")。|blockquote|2032284|您可以在EditItemTemplate中使用Eval而不是Bind。您还需要转换为string：|2032285|<asp:Label+ID="LabelDescription"+
+++++++++++runat="server"+
+++++++++++Text='<%25#+System.Web.HttpUtility.HtmlEncode((string)Eval("Description"))+%25>'+/>|code-block|syntax|javascript|2032286|entityMap|0|LINK|mutability|MUTABLE|url|http://weblogs.asp.net/leftslipper/archive/2007/06/29/how-asp-net-databinding-deals-with-eval-and-bind-statements.aspx^0|2|3A|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@$A|W|B|X|1|Y]]|C|$]]|$1|D|3|E|5|F|7|Z|8|@]|9|@]|C|$]]|$1|G|3|H|5|6|7|10|8|@]|9|@]|C|$]]|$1|I|3|J|5|K|7|11|8|@]|9|@]|C|$L|M]]|$1|N|3|-4|5|6|7|12|8|@]|9|@]|C|$]]]|O|$P|$5|Q|R|S|C|$T|U]]]]

Quote from <a href="http://weblogs.asp.net/leftslipper/archive/2007/06/29/how-asp-net-databinding-deals-with-eval-and-bind-statements.aspx" rel="noreferrer">http://weblogs.asp.net/leftslipper/archive/2007/06/29/how-asp-net-databinding-deals-with-eval-and-bind-statements.aspx</a>

<blockquote>
 There isn’t a Bind method
 in ASP.NET. When ASP.NET
 parses your file and sees you're using
 
 it generates some
 special code for it. 
 
 
 When you use it's
 not a real function call. If ASP.NET
 parses the code and detects a Bind()
 statement, it splits the statement
 into two parts. The first part is the
 one-way databinding portion, which
 ends up being just a regular Eval()
 call. The second part is the reverse
 portion, which is typically some code
 along the lines of "string name =
 TextBox1.Text" that grabs the value
 back out from where it was bound.
 However, because ASP.NET has to parse
 Bind() statements, two-way databinding
 doesn’t support anything other than
 Bind(). For example, the following
 syntax is invalid because it tries to
 invoke arbitrary code and use Bind()
 at the same time:
 
 
 
 
 The only formats supported in two-way
 databinding are Bind("field") and
 Bind("field", "format string {0}").
</blockquote>

You could use Eval instead of Bind in your EditItemTemplate. You also need to cast to string:

<pre><code>&lt;asp:Label ID="LabelDescription" 
 runat="server" 
 Text='&lt;%# System.Web.HttpUtility.HtmlEncode((string)Eval("Description")) %&gt;' /&gt;
</code></pre>

blocks|key|2032323|text|Bind()用于双向数据绑定，为此您必须使用网格视图的RowUpdating事件。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|2032324|void+GridView_RowUpdating(Object+sender,+GridViewUpdateEventArgs+e)
{
++++foreach+(DictionaryEntry+entry+in+e.NewValues)
++++{
++++++++e.NewValues[entry.Key]+=+System.Web.HttpUtility.HtmlEncode(entry.Value.ToString());
++++}
}|code-block|syntax|javascript|2032325|entityMap|0|LINK|mutability|MUTABLE|url|http://www.devx.com/DevX/Article/35058|1|http://msdn.microsoft.com/en-us/library/system.web.ui.webcontrols.gridview.rowupdating.aspx^0|8|6|0|R|B|1|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@$A|T|B|U|1|V]|$A|W|B|X|1|Y]]|C|$]]|$1|D|3|E|5|F|7|Z|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|10|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]|Q|$5|L|M|N|C|$O|R]]]]

Bind() is used for <a href="http://www.devx.com/DevX/Article/35058" rel="nofollow noreferrer">Two-Way Data Binding</a>, for this to work you will have to use the <a href="http://msdn.microsoft.com/en-us/library/system.web.ui.webcontrols.gridview.rowupdating.aspx" rel="nofollow noreferrer">RowUpdating</a> event of the gridview.

<pre><code>void GridView_RowUpdating(Object sender, GridViewUpdateEventArgs e)
{
 foreach (DictionaryEntry entry in e.NewValues)
 {
 e.NewValues[entry.Key] = System.Web.HttpUtility.HtmlEncode(entry.Value.ToString());
 }
}
</code></pre>

blocks|key|499890|text|但是，如果您使用了来自Phaedrus的下面的代码，并且有一个复选框列，那么请小心！|type|unstyled|depth|inlineStyleRanges|entityRanges|data|499891|void+GridView_RowUpdating(Object+sender,+GridViewUpdateEventArgs+e)
{
++++foreach+(DictionaryEntry+entry+in+e.NewValues)
++++{
++++++++e.NewValues[entry.Key]+=+System.Web.HttpUtility.HtmlEncode(entry.Value.ToString());
++++}
}|code-block|syntax|javascript|499892|因为entry.Value.ToString()将使复选框变为true，所以您无法将其保存在数据库字段中！|offset|length|style|CODE|499893|entityMap^0|0|0|2|M|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|Q|8|@$I|R|J|S|K|L]]|9|@]|A|$]]|$1|M|3|-4|5|6|7|T|8|@]|9|@]|A|$]]]|N|$]]

But take care if you use following code from Phaedrus and you have a checkbox column!

<pre><code>void GridView_RowUpdating(Object sender, GridViewUpdateEventArgs e)
{
 foreach (DictionaryEntry entry in e.NewValues)
 {
 e.NewValues[entry.Key] = System.Web.HttpUtility.HtmlEncode(entry.Value.ToString());
 }
}
</code></pre>

Because the <code>entry.Value.ToString()</code> will make the true from the Checkbox to True and then you can not save it in the database field!

blocks|key|784089|text|正如达林·季米特洛夫已经解释过的那样，你不能使用Bind作为函数的参数。所以Text='<%25#+System.Web.HttpUtility.HtmlEncode(Bind("Description"))+%25>'是不可能的。另一方面，这里通常没有必要使用HtmlEncode，因为您将在控件中使用Bind，该控件允许更改数据，例如与TextBox一起使用(如您的EditItemTemplate示例中的例子)。但是TextBox会自动编码，因此您可以安全地调用Bind而不需要HtmlEncode：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|784090|<EditItemTemplate>
++++<asp:TextBox+ID="TextBoxDescription"+runat="server"
+++++++++++++++++Text='<%25#+Bind("Description")+%25>'
+++++++++++++++++ValidationGroup="EditItemGrid"
+++++++++++++++++MaxLength="30"+/>
++++<asp:Validator+...+/>
</EditItemTemplate>|code-block|syntax|javascript|784091|如果一个Bind+不能使用自动编码，那么将是一个巨大的安全漏洞(除非您绝对确信您的数据可以安全地呈现到HTML中而无需编码)。|BOLD|784092|但是，例如，标签的自动编码就不是这样了。虽然您也可以在标签的Text属性中使用Bind，但对标签的输出不会自动编码--这是为什么在标签中使用Bind并不是一个好做法的原因，因为您不能用Bind对标签文本进行编码。相反，使用Eval并将其包装到HtmlEncode中，就像您在ItemTemplate：Text='<%25#+System.Web.HttpUtility.HtmlEncode((string)Eval("Description"))+%25>'中所做的那样|784093|entityMap^0|O|4|12|1W|44|4|6E|4|0|0|4|4|9|4|K|B|4|4|0|13|4|1Y|4|2K|4|33|4|46|24|0^^$0|@$1|2|3|4|5|6|7|R|8|@$9|S|A|T|B|C]|$9|U|A|V|B|C]|$9|W|A|X|B|C]|$9|Y|A|Z|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|10|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|11|8|@$9|12|A|13|B|M]|$9|14|A|15|B|M]|$9|16|A|17|B|M]|$9|18|A|19|B|C]]|D|@]|E|$]]|$1|N|3|O|5|6|7|1A|8|@$9|1B|A|1C|B|C]|$9|1D|A|1E|B|C]|$9|1F|A|1G|B|C]|$9|1H|A|1I|B|C]|$9|1J|A|1K|B|C]]|D|@]|E|$]]|$1|P|3|-4|5|6|7|1L|8|@]|D|@]|E|$]]]|Q|$]]

As already explained by Darin Dimitrov you cannot use <code>Bind</code> as a parameter of a function. So <code>Text='&lt;%# System.Web.HttpUtility.HtmlEncode(Bind("Description")) %&gt;'</code> is not possible. On the other side it's usually not necessary to use HtmlEncode here because you will use <code>Bind</code> with a control which allows to change data, for instance along with a TextBox (as in the example of your EditItemTemplate). But a TextBox encodes automatically, so you can safely call <code>Bind</code> without the need of HtmlEncode:

<pre><code>&lt;EditItemTemplate&gt;
 &lt;asp:TextBox ID="TextBoxDescription" runat="server"
 Text='&lt;%# Bind("Description") %&gt;'
 ValidationGroup="EditItemGrid"
 MaxLength="30" /&gt;
 &lt;asp:Validator ... /&gt;
&lt;/EditItemTemplate&gt;
</code></pre>

If a TextBox would not encode automatically using <code>Bind</code> would be a huge security hole (unless you are absolutely sure that your data are safe to be rendered to HTML without encoding). 

But automatic encoding is NOT the case for a label for instance. Although you can also use <code>Bind</code> in the Text property of a label, the output to the label is NOT encoded automatically - a reason why using <code>Bind</code> with a label isn't a good practice, since you cannot encode the label text with <code>Bind</code>. Instead use <code>Eval</code> and wrap it into HtmlEncode as you have done it in your ItemTemplate: <code>Text='&lt;%# System.Web.HttpUtility.HtmlEncode((string)Eval("Description")) %&gt;'</code>

blocks|key|2032399|text|那么简单的扩展方法呢？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2032400|public+static+string+HtmlEncode(this+string+s)
++++{++++++++++++
++++++++s+=+HttpUtility.HtmlEncode(s);
++++++++return+s;
++++}|code-block|syntax|javascript|2032401|然后您可以简单地运行：|2032402|<asp:Label+runat="server"+Text=<%25#+((string)Eval("MyStringField")).HtmlEncode()+%25>+/>|2032403|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

What about a simple extension method?

<pre><code>public static string HtmlEncode(this string s)
 { 
 s = HttpUtility.HtmlEncode(s);
 return s;
 }
</code></pre>

You could then simply run: 

<pre><code>&lt;asp:Label runat="server" Text=&lt;%# ((string)Eval("MyStringField")).HtmlEncode() %&gt; /&gt;
</code></pre>

blocks|key|499986|text|请参阅|type|unstyled|depth|inlineStyleRanges|entityRanges|data|499987|http://forums.asp.net/p/1056231/1504717.aspx|offset|length|499988|我从这里得到了解决方案。它对我来说就像一种魅力。|499989|entityMap|0|LINK|mutability|MUTABLE|url^0|0|0|18|0|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|P|8|@]|9|@$D|Q|E|R|1|S]]|A|$]]|$1|F|3|G|5|6|7|T|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|U|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|C]]]]

Kindly Refer to 

<a href="http://forums.asp.net/p/1056231/1504717.aspx" rel="nofollow noreferrer">http://forums.asp.net/p/1056231/1504717.aspx</a>

I got the working solution from here . Its working like a charm for me.

blocks|key|499999|text|<asp:TemplateField+HeaderText="Description">+++++
++<EditItemTemplate>+++++++++
++++<asp:TextBox+ID="TextBoxDescription"+runat="server"+Text='<%25#+System.Web.HttpUtility.HtmlEncode(Bind("Description"))+%25>'++++++++++++++++ValidationGroup="EditItemGrid"++MaxLength="30"+/>
+++++<asp:Validator+...+/>+++++
++</EditItemTemplate>+++++
++<ItemTemplate>+++++++++
+++++<asp:Label+ID="LabelDescription"+runat="server"++Text='<%25#+System.Web.HttpUtility.HtmlEncode(Convert.ToString(Eval("Description")))+%25>'+/>+
++</ItemTemplate>+
</asp:TemplateField>+|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|500000|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>&lt;asp:TemplateField HeaderText="Description"&gt; 
 &lt;EditItemTemplate&gt; 
 &lt;asp:TextBox ID="TextBoxDescription" runat="server" Text='&lt;%# System.Web.HttpUtility.HtmlEncode(Bind("Description")) %&gt;' ValidationGroup="EditItemGrid" MaxLength="30" /&gt;
 &lt;asp:Validator ... /&gt; 
 &lt;/EditItemTemplate&gt; 
 &lt;ItemTemplate&gt; 
 &lt;asp:Label ID="LabelDescription" runat="server" Text='&lt;%# System.Web.HttpUtility.HtmlEncode(Convert.ToString(Eval("Description"))) %&gt;' /&gt; 
 &lt;/ItemTemplate&gt; 
&lt;/asp:TemplateField&gt; 
</code></pre>

blocks|key|2032487|text|现在可以使用ASP.NET+4中引入的新的HTML编码绑定语法来完成这项工作。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2032488|您可以简单地使用：|2032489|<%25#:+Eval("MyField")+%25>|code-block|syntax|javascript|2032490|或|2032491|<%25#:+Bind("MyField")+%25>|2032492|注意到磅/散列符号后面的冒号，它就是这样简单。|offset|length|style|BOLD|2032493|entityMap^0|0|0|0|0|0|0|9|0^^$0|@$1|2|3|4|5|6|7|U|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|V|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|W|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|X|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|Y|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|Z|8|@$O|10|P|11|Q|R]]|9|@]|A|$]]|$1|S|3|-4|5|6|7|12|8|@]|9|@]|A|$]]]|T|$]]

This is now possible to do using the new HTML encoding databinding syntax introduced in ASP.NET 4.

You can simply use:

<pre><code>&lt;%#: Eval("MyField") %&gt;
</code></pre>

Or

<pre><code>&lt;%#: Bind("MyField") %&gt;
</code></pre>

Note the colon after the pound/hash sign It's as simple as that.

blocks|key|783849|text|在我的例子中，我被迫在mi+EditItemTemplate的TextBox上使用"Bind“方法，因为在处理item_Updating事件时，需要在NewValues数组中访问数据。所以我想了如下：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|783850|在我的EditItemTemplate上|783851|<EditItemTemplate>
+++++<asp:TextBox+runat="server"+Text='<%25#+Bind("field")%25>'+ID="TextBox112"+OnPreRender="TextBox_PreRender_decode"></asp:TextBox>++++++++++++++++++++++++++++++++++++++++++++
</EditItemTemplate>+|code-block|syntax|javascript|783852|然后在后面的代码中：|783853|protected+void+TextBox_PreRender_decode(object+sender,+EventArgs+e)
{
++++TextBox+tb+=+(TextBox)sender;
++++tb.Text+=+WebUtility.HtmlDecode(tb.Text);
}|783854|该解决方案允许我为所有TextBoxes正确显示html编码的数据，同时能够在newValues事件触发时从item_Updating数组访问这些数据。|783855|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|F|7|U|8|@]|9|@]|A|$G|H]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

In my case I was forced to use the "Bind" method on mi EditItemTemplate's TextBox because needed the data to be accessible in the NewValues array at the item_Updating event handling. So i figured out as follow:

on my EditItemTemplate : 

<pre><code>&lt;EditItemTemplate&gt;
 &lt;asp:TextBox runat="server" Text='&lt;%# Bind("field")%&gt;' ID="TextBox112" OnPreRender="TextBox_PreRender_decode"&gt;&lt;/asp:TextBox&gt; 
&lt;/EditItemTemplate&gt; 
</code></pre>

then in the code behind :

<pre><code>protected void TextBox_PreRender_decode(object sender, EventArgs e)
{
 TextBox tb = (TextBox)sender;
 tb.Text = WebUtility.HtmlDecode(tb.Text);
}
</code></pre>

This solution allowed me to show properly an html-encoded data for all of my TextBoxes and at the same time being able to access this data from the newValues array when the item_Updating event fires.

I have a GridView bound to an ObjectDataSource. I've got it supporting editing as well, which works just fine. However, I'd like to safely HtmlEncode text that is displayed as we do allow special characters in certain fields. This is a cinch to do with standard BoundFields, as I just set HtmlEncode to true.

But in order to setup validation controls, one needs to use TemplateFields instead. How do I easily add HtmlEncoding to output this way? This is an ASP.NET 2.0 project, so I'm using the newer data binding shortcuts (e.g. <code>Eval</code> and <code>Bind</code>).

What I'd like to do is something like the following:

<pre><code>&lt;asp:TemplateField HeaderText="Description"&gt;
 &lt;EditItemTemplate&gt;
 &lt;asp:TextBox ID="TextBoxDescription" runat="server"
 Text='&lt;%# System.Web.HttpUtility.HtmlEncode(Bind("Description")) %&gt;'
 ValidationGroup="EditItemGrid"
 MaxLength="30" /&gt;
 &lt;asp:Validator ... /&gt;
 &lt;/EditItemTemplate&gt;
 &lt;ItemTemplate&gt;
 &lt;asp:Label ID="LabelDescription" runat="server"
 Text='&lt;%# System.Web.HttpUtility.HtmlEncode(Eval("Description")) %&gt;' /&gt;
 &lt;/ItemTemplate&gt;
&lt;/asp:TemplateField&gt;
</code></pre>

However, when I try it this way, I get the following error:

<blockquote>
 CS0103: The name 'Bind' does not exist
 in the current context
</blockquote>

How to use HtmlEncode with TemplateFields, Data Binding, and a GridView

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我有一个GridView绑定到一个ObjectDataSource。我也有支持编辑的功能，效果很好。但是，我想安全地显示HtmlEncode文本，因为我们确实允许某些字段中的特殊字符。这与标准BoundFields有关，因为我刚刚将HtmlEncode设置为true。但是，为了设置验证控件，需要使用TemplateFi...

问如何将HtmlEncode与TemplateFields、数据绑定和GridView一起使用
EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何将HtmlEncode与TemplateFields、数据绑定和GridView一起使用EN

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何将HtmlEncode与TemplateFields、数据绑定和GridView一起使用
EN