A string may not be formatted correctly when you try to format the string by using the DataFormatString property of the BoundField class in the DataView control in the .NET Framework 2.0 (916441)


The information in this article applies to:

  • Microsoft .NET Framework 2.0

SYMPTOMS

You try to format a string by using the DataFormatString property of the BoundField class in the DataView control. When you do this, the string may not be formatted correctly. This behavior may occur when the Web application is built on the Microsoft .NET Framework 2.0.

Note This behavior does not occur when you use the .NET Framework 2.0 Beta 2 or earlier versions of the .NET Framework.

CAUSE

This behavior occurs because the data is automatically encoded before the string formatting is applied. By default, the HtmlEncode property of the BoundField class in the DataView control is set to True. The HtmlEncode property is set to True to encode the string data. When the HtmlEncode property is set to True, unsafe script from the data store cannot be displayed on the client computer. This feature of the .NET Framework helps protect the client computer from cross-site scripting attacks.

RESOLUTION

To resolve this behavior, set the HtmlEncode property of the BoundField class in the DataView control to False. Alternatively, use a TemplateField control instead.

STATUS

This behavior is by design.

MORE INFORMATION

For more information about how to use the BoundField class, visit the following Microsoft Developer Network (MSDN) Web site:

http://msdn2.microsoft.com/en-us/library/system.web.ui.webcontrols.boundfield.aspx

For more information about how to use the DataView class, visit the following MSDN Web site:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/cpref/html/frlrfsystemdatadataviewclasstopic.asp

For more information about how to use the BoundColumn class, visit the following MSDN Web site:

http://msdn2.microsoft.com/en-us/library/system.web.ui.webcontrols.boundcolumn.aspx

For more information about how to use the TemplateField class, visit the following MSDN Web site:

http://msdn2.microsoft.com/en-us/library/system.web.ui.webcontrols.templatefield.aspx

Modification Type:MajorLast Reviewed:8/25/2006
Keywords:kbtshoot kbnofix kbprb KB916441 kbAudDeveloper
©2004 Microsoft Corporation. All rights reserved.