ashx生成html的,在我的.ashx HtmlEncode

我不认为HTML编码JSON是有道理的。如果你在JSON对象中有不可信的值，那么你在构造JSON对象之前先对它们进行编码。

string fromMaliciousUser=".............";;

string json="{'userInput':'"+HttpUtility.HtmlEncode(fromMaliciousUser)+"'}";编辑：我试过这段代码，它返回JSON NICELY :)

代码在ASHX：

[WebService(Namespace = "http://tempuri.org/")]

[WebServiceBinding(ConformsTo = WsiProfiles.BasicProfile1_1)]

public class JsonReturning : IHttpHandler

{

public void ProcessRequest(HttpContext context)

{WriteJson(context);}

private void WriteJson(HttpContext context)

{

IList images =

GetImages();//Here you should get your images;

//json contains Images object whose value is array ([)

StringBuilder sb = new StringBuilder("{'Images':[");

//all values in array quoted in (') and separated with (,)

string imgFmt =

"'

width=\"{3}px\" />',";

foreach (var i in images)

{

sb.AppendFormat(imgFmt, i.ImageSrc, i.Title,

i.Height, i.Width);

}

sb.Remove(sb.Length - 1, 1);//remove last ','

sb.Append("]}");//close array (]) and object (})

context.Response.Clear();

context.Response.ContentType = "application/json";

context.Response.ContentEncoding = Encoding.UTF8;

context.Response.Write(sb.ToString());

}

public bool IsReusable{get{return false;}}

private IList GetImages()

{

IList list = new List();

list.Add(new ImageDetails() { ImageSrc = @"/images/image1.jpg",

Title = "Image1", Height = 124, Width = 124 });

list.Add(new ImageDetails() { ImageSrc = @"/images/image2.jpg",

Title = "Image2", Height = 124, Width = 124 });

list.Add(new ImageDetails() { ImageSrc = @"/images/image3.jpg",

Title = "Image3", Height = 124, Width = 124 });

list.Add(new ImageDetails() { ImageSrc = @"/images/image4.jpg",

Title = "Image4", Height = 124, Width = 124 });

list.Add(new ImageDetails() { ImageSrc = @"/images/image5.jpg",

Title = "Image5", Height = 124, Width = 124 });

return list;

}

}

internal class ImageDetails

{

internal string ImageSrc{get;set;}

internal string Title { get; set; }

internal int Height { get; set; }

internal int Width { get; set; }

}HTML：

Get Json

$(document).ready(function() {

$("#jButton").click(function() {

$.ajax({

url: 'GetImages.imj',

type: 'POST',

data: "{'a':'b'}",

dataType: 'json',

contentType: 'application/json;charset:utf-8',

success: function(res, status) {

$("#divJsonList").text(res.Images);

},

error: function(x, s, e) {

alert(e);

}

});

});

});