Question

I have a web service that returns an xml string as results. The return string is in this format:

<ReturnValue>
   <ErrorNumber>0
</ErrorNumber>
<Message>my message</Message>
</ReturnValue>

The data that I want to insert into the “message” tag is a serialized version of a custom object. The serialized format of that object contains xml and namespace declarations post serialization. When that gets thrown into the “message” tag of my return xml string, XmlSpy says that it’s not well-formed. How should I get rid of the namespace declarations, or is there a different way to imbed a serialized object into an xml string?

Answer 1

Just make sure that your <Message> XML is encoded so that <, >, ", and & show up as <, >, " and &, respectively.

There are few built-in ways to encode the characters:

string message = System.Web.HttpUtility.HtmlEncode(serializedXml);

string message = System.Security.SecurityElement.Escape(serializedXml);

• Using an XmlTextWriter to do the work for you
• Use CDATA to wrap your XML

Also, this is probably a duplicate of:

1. Best way to encode text data for XML