Dekoder html online

I Exported datatable contents using DataTable Export. Any row if contains characters such as <, >, & are interpreted as html special characters in the excel file.

I tried to manipulate the same in the following way

$("table1").DataTable({    buttons: [        {            extend: 'excel',            exportOptions: {                format: {                    body: function(innerHtml, rowIndex, columnIndex){                        return '<';                    }                }            }        }    ]});

This generates Excel File that constitutes all the data cells include '&lt;'.

I also tried the following way in the url:How to decode HTML entities using jQuery?

Is this issue also linked with Datatables / TableTools: format data as text when exporting to Excel ?

Please help me with this. Thanks in advance.

We're having conflict with coworkers on whether we should htmlencode user input and then save it to db ( vs saving it straight forward as it is)

I also found various answers which says that DB should save the plain(!) input.

Why ? because DB should know that the user length is 1 in < and not 4 in <

The html encoding should only be made when outputting.

but:

Having said that , I see that Stackoverflow is not following this rule.

When I save a question here at SO , which contains plain < it does show (obviously) the < in the preview pane. BUT when I submit the question : it submit the content as json with html encode !

Json.stringify is not doing html encode

So If I type in the input :

And submits :

I see (via fiddler) that it sends actually the html encode value :

Question :

As you see - i'm a bit confused. the common logic says that db should save whatever the user type 1:1.

The sanitization should be made at the output

I have a page that is part of a backend CRM admin panel. On that page the HTML output comes from some PHP functions that I can't access. And that HTML automatically changes < and > into HTML encoded characters.

So there is a div that contains html tags like <br /> that is converted into <b />

So I need to change it back to the HTML characters using only jQuery:

< to <
&gt; to >

Is there a jQuery script I can use to replace those special characters with the corresponding symbols? This will mean my HTML tags will actually work and the HTML will being displayed properly on the screen?

I've tried removewith() but i can't make it work.

ADDED:The div that im trying to modify is this

<div style="font-size: 11px; width: 90%; font-family: Tahoma;" id="cotiz">&lt;strong&gt;Valuación&lt;/strong&gt; de InfoAuto: 35.500,00&lt;br /&gt; Cotización Seleccionada: Ninguna&lt;br /&gt; Allianz, Responsabilidad Civil: $205,25&lt;br /&gt; Allianz, Terceros Completos: $278,85 </div>

I have an ASP.NET Web Forms application. There is a page with TextBoxes and users enter search terms into these which are used to query the database.

I know that I need to prevent JavaScript injection attacks. How do I do this?

In MVC I would use Html.Encode. It doesn't seem to be recognized in Web Forms.

Thanks!

Are they the same as XML, perhaps plus the space one ( )?

I've found some huge lists of HTML escape characters but I don't think they must be escaped. I want to know what needs to be escaped.