Microsoft KB Archive/916441

= A string may not be formatted correctly when you try to format the string by using the DataFormatString property of the BoundField class in the DataView control in the .NET Framework 2.0 =

Article ID: 916441

Article Last Modified on 12/3/2007

-

APPLIES TO


 * Microsoft .NET Framework 2.0

-



SYMPTOMS
You try to format a string by using the DataFormatString property of the BoundField class in the DataView control. When you do this, the string may not be formatted correctly. This behavior may occur when the Web application is built on the Microsoft .NET Framework 2.0.

Note This behavior does not occur when you use the .NET Framework 2.0 Beta 2 or earlier versions of the .NET Framework.



CAUSE
This behavior occurs because the data is automatically encoded before the string formatting is applied. By default, the HtmlEncode property of the BoundField class in the DataView control is set to True. The HtmlEncode property is set to True to encode the string data. When the HtmlEncode property is set to True, unsafe script from the data store cannot be displayed on the client computer. This feature of the .NET Framework helps protect the client computer from cross-site scripting attacks.



RESOLUTION
To resolve this behavior, set the HtmlEncode property of the BoundField class in the DataView control to False. Alternatively, use a TemplateField control instead.



STATUS
This behavior is by design.



MORE INFORMATION
For more information about how to use the BoundField class, visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn2.microsoft.com/en-us/library/system.web.ui.webcontrols.boundfield.aspx

For more information about how to use the DataView class, visit the following MSDN Web site:

http://msdn2.microsoft.com/en-us/library/system.data.dataview(vs.71).aspx

For more information about how to use the BoundColumn class, visit the following MSDN Web site:

http://msdn2.microsoft.com/en-us/library/system.web.ui.webcontrols.boundcolumn.aspx

For more information about how to use the TemplateField class, visit the following MSDN Web site:

http://msdn2.microsoft.com/en-us/library/system.web.ui.webcontrols.templatefield.aspx

Keywords: kbtshoot kbnofix kbprb KB916441

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.