Online Html Encoder

I know that the EURO currency symbol (€) is encoded as € in HTML, but the System.Web.HttpUtility.HtmlEncode("€") doesn't encode it at all. Does anyone know why that is?

The HttpUtility class provides for both encoding and decoding. But, when I use the MS AntiXSS 3.1 Library I have a set of methods only for encoding, does this mean decoding can be avoided?

For example

Before applying AntiXSS:

lblName.Text = "ABC" + "<script> alert('Inject'); </script";

After applying AntiXSS:

lblName.Text = AntiXSS.HTMLEncode("ABC" + "<script> alert('Inject'); </script");

So, after applying the encoding, the HTML tags show up in my Label control.

Is this the desired outcome?

I wonder if I have to care about XSS when source is values from database tables ? Source is in JSON fomat.

By now everywhere I think it is used as HTML content, I escape it. So before sending it as JSON response to autocomplete, I htmlencode the content.

From what I see, It looks like jqueryui autocomplete escape the value again, so HMTL entities appear like &#entity_number;

I don't want my app to be exposed to XSS through autocomplete. How can I insure that ?

I have a Javascript application where I need to escape characters like "<" and ">" in a string.

This looks like an ideal solution:

How to escape HTML

function escapeHTML(str){    var p = document.createElement("p");    p.appendChild(document.createTextNode(str));    return p.innerHTML;}

or a short alternative using the Option() constructor

function escapeHTML(str){    return new Option(str).innerHTML;}

Q: Does this actually add "p" (and the associated text) to my DOM?

Q: Do I need a "removeChild()" or any other "cleanup" if all I want to save is the escaped string?

I am using tFPDF to generate a PDF. The php file is UTF-8 encoded.I want © for example, to be output in the pdf as the copyright symbol.

I have tried iconv, html_entity_decode, htmlspecialchars_decode. When I take the string I am trying to decode and hard-code it in to a different file and decode it, it works as expected. So for some reason it is not being output in the PDF. I have tried output buffering. I am using DejaVuSansCondensed.ttf (true type fonts).

Link to tFPDF: http://fpdf.org/en/script/script92.php

I am out of ideas. I tried double decoding, I checked everywhere to make sure it was not being encoded anywhere else.

Help!