274

I have a textarea control that accepts input. I am trying to later render that text to a view by simply using:

@Model.CommentText

This is properly encoding any values. However, I want to replace the line break characters with <br /> and I can't find a way to make sure that the new br tags don't get encoded. I have tried using HtmlString but haven't had any luck yet.

2
  • 2
    I presume linebreaks are stored as \n in the database and you want to convert to a <br />?
    – Marko
    Nov 18, 2010 at 22:45
  • Yes - just trying to replace \n with <br /> in the view.
    – bkaid
    Nov 18, 2010 at 22:52

7 Answers 7

774

Use the CSS white-space property instead of opening yourself up to XSS vulnerabilities!

<span style="white-space: pre-line">@Model.CommentText</span>
14
  • 14
    @Jacob Krall - I logged in just to give you a +1. Fantastic little trick. Jul 17, 2012 at 12:41
  • 9
    quirksmode.org/css/whitespace.html has a good explanation of pre-line (I was only aware of nowrap and pre). Aug 12, 2012 at 16:24
  • 10
    Didn't know about this. Definitely better answer than mine.
    – Omar
    Aug 13, 2012 at 17:11
  • 53
    actually white-space: pre-wrap; is better since pre-line will mess with your text by grouping white spaces into one space. Jun 24, 2013 at 10:58
  • 7
    Unfortunately this won't work in almost any email client (including Office 2013).
    – Roger Far
    Dec 4, 2014 at 20:19
120

Try the following:

@MvcHtmlString.Create(Model.CommentText.Replace(Environment.NewLine, "<br />"))

Update:

According to marcind's comment on this related question, the ASP.NET MVC team is looking to implement something similar to the <%: and <%= for the Razor view engine.

Update 2:

We can turn any question about HTML encoding into a discussion on harmful user inputs, but enough of that already exists.

Anyway, take care of potential harmful user input.

@MvcHtmlString.Create(Html.Encode(Model.CommentText).Replace(Environment.NewLine, "<br />"))

Update 3 (Asp.Net MVC 3):

@Html.Raw(Html.Encode(Model.CommentText).Replace("\n", "<br />"))
9
  • 16
    Oh my GOD, no. What if I decide to comment about some <script>. Nov 18, 2010 at 22:49
  • 4
    Thanks - that worked. Was very close but must have been doing the replace too soon or too late. I ended up using this: @MvcHtmlString.Create(Html.Encode(Model.CommentText).Replace("\n", "<br />")) because Environment.NewLine wasn't working right.
    – bkaid
    Nov 18, 2010 at 23:39
  • 3
    Environment.NewLine doesn't really apply to form posts since browsers usually return just \n instead of \r\n Nov 19, 2010 at 1:07
  • 20
    For the released version of MVC 3, the suggestion appears to be @Html.Raw(Html.Encode(Model.CommentText).Replace(Environment.NewLine, "<br />")), instead of using MvcHtmlString. At least for display. Mar 31, 2011 at 20:25
  • 3
    Even with MVC3 this solution looks quite ugly. It's rather long, you have to look twice to be sure everything gets encoded right and you have problems with different kinds of newlines. The CSS-based solution below is much better! Feb 2, 2012 at 12:14
12

Split on newlines (environment agnostic) and print regularly -- no need to worry about encoding or xss:

@if (!string.IsNullOrWhiteSpace(text)) 
{
    var lines = text.Split(new[] { '\r', '\n' }, StringSplitOptions.RemoveEmptyEntries);
    foreach (var line in lines)
    {
        <p>@line</p>
    }
}

(remove empty entries is optional)

10

Omar's third solution as an HTML Helper would be:

public static IHtmlString FormatNewLines(this HtmlHelper helper, string input)
{
    return helper.Raw(helper.Encode(input).Replace("\n", "<br />"));
}
5

Applying the DRY principle to Omar's solution, here's an HTML Helper extension:

using System.Web.Mvc;
using System.Text.RegularExpressions;

namespace System.Web.Mvc.Html {
    public static class MyHtmlHelpers {
        public static MvcHtmlString EncodedReplace(this HtmlHelper helper, string input, string pattern, string replacement) {
            return new MvcHtmlString(Regex.Replace(helper.Encode(input), pattern, replacement));
        }
    }
}

Usage (with improved regex):

@Html.EncodedReplace(Model.CommentText, "[\n\r]+", "<br />")

This also has the added benefit of putting less onus on the Razor View developer to ensure security from XSS vulnerabilities.


My concern with Jacob's solution is that rendering the line breaks with CSS breaks the HTML semantics.

4

I needed to break some text into paragraphs ("p" tags), so I created a simple helper using some of the recommendations in previous answers (thank you guys).

public static MvcHtmlString ToParagraphs(this HtmlHelper html, string value) 
    { 
        value = html.Encode(value).Replace("\r", String.Empty);
        var arr = value.Split('\n').Where(a => a.Trim() != string.Empty);
        var htmlStr = "<p>" + String.Join("</p><p>", arr) + "</p>";
        return MvcHtmlString.Create(htmlStr);
    }

Usage:

@Html.ToParagraphs(Model.Comments)
0

I prefer this method as it doesn't require manually emitting markup. I use this because I'm rendering Razor Pages to strings and sending them out via email, which is an environment where the white-space styling won't always work.

public static IHtmlContent RenderNewlines<TModel>(this IHtmlHelper<TModel> html, string content)
{
    if (string.IsNullOrEmpty(content) || html is null)
    {
        return null;
    }

    TagBuilder brTag = new TagBuilder("br");
    IHtmlContent br = brTag.RenderSelfClosingTag();
    HtmlContentBuilder htmlContent = new HtmlContentBuilder();

    // JAS: On the off chance a browser is using LF instead of CRLF we strip out CR before splitting on LF.
    string lfContent = content.Replace("\r", string.Empty, StringComparison.InvariantCulture);
    string[] lines = lfContent.Split('\n', StringSplitOptions.None);
    foreach(string line in lines)
    {
        _ = htmlContent.Append(line);
        _ = htmlContent.AppendHtml(br);
    }

    return htmlContent;
}

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.