File: Default.aspx <%@ Page Language="C#" AutoEventWireup="true" CodeFile="Default.aspx.cs" Inherits="HtmlEncodeTest" %> <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.1//EN" "http://www.w3.org/TR/xhtml11/DTD/xhtml11.dtd"> <html xmlns="http://www.w3.org/1999/xhtml" > <head runat="server"> <title>Untitled Page</title> </head> <body> <form ID="form1" runat="server"> <div> <h1>Properly encoded:</h1> <div ID="ctrl2" runat="server"/> <br /><hr /><br /> <h1>Incorrectly encoded:</h1> <div ID="ctrl1" runat="server"/> </div> </form> </body> </html> File: Default.aspx.cs using System; using System.Data; using System.Configuration; using System.Collections; using System.Web; using System.Web.Security; using System.Web.UI; using System.Web.UI.WebControls; using System.Web.UI.WebControls.WebParts; using System.Web.UI.HtmlControls; public partial class HtmlEncodeTest : System.Web.UI.Page { protected void Page_Load(object sender, EventArgs e) { ctrl1.InnerHtml = "To <b>bold</b> text use the <b> tag."; ctrl2.InnerHtml = "To <b>bold</b> text use the " + Server.HtmlEncode("<b>") + " tag."; } }