Passing string value to javascript from c#.net

Question

Basically I have a string variable and i pass this string variable to javascript function using the code below.

Chart1.Series["Series1"].Points[counter].MapAreaAttributes = "onmouseover=\"showAlert("+tempString+",event);\"";

my javascript function is as follows:

function showAlert(stringVal,ex) {
       //var temp = document.getElementById("HTxtFieldPopIp").value;
      // temp = "testing";
      // alert(temp);
        alert(stringVal);
   }

But this doesnt give me a alert box.

When i remove the parameter and run the commented pieces of code the same happens. Any suggestions.

Does this function gets fired? If so,try adding return false inside function showAlert; — MahaSwetha
– MahaSwetha, Commented May 29, 2013 at 4:52

bryanmac · Accepted Answer · 2013-05-29 04:49:42Z

3

You need to quote the string:

"onmouseover=\"showAlert("+tempString+",event);\""

becomes:

"onmouseover=\"showAlert('"+tempString+"',event);\""

So, if tempString equals foo then the js dynamically generated would be:

onmouseover="showAlert('foo',event);"

answered May 29, 2013 at 4:49

bryanmac

39.3k10 gold badges93 silver badges99 bronze badges

Sign up to request clarification or add additional context in comments.

3 Comments

Alexei Levenkov Over a year ago

+0. While correct, using properly encoded string would be much safer - current sample is likely cause XSS (old MSDN article on XSS and method that should be used now to construct the inner portion of string JavaScriptStringEncode.

bryanmac Over a year ago

He's just doing a silly alert on a tempString. I was answering why it wasn't working :)

Alexei Levenkov Over a year ago

+1. Probably you are right, I should not expect people to care about it :).

venerik · Accepted Answer · 2013-05-29 04:53:07Z

2

I think you need quotes around tempString. Your C# code now results in:

onmouseover="showAlert(testing,event)"

Change it to

Chart1.Series["Series1"].Points[counter].MapAreaAttributes = "onmouseover=\"showAlert('"+tempString+"',event);\"";

answered May 29, 2013 at 4:53

venerik

5,9122 gold badges36 silver badges45 bronze badges

Collectives™ on Stack Overflow

Passing string value to javascript from c#.net

2 Answers 2

3 Comments

Comments

Linked

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

3 Comments

Comments

Linked

Related