Question

What would be the best way to properly concatenate string with an url inside? Can it be okay with this?

String.Format("This is the link: <a href={0}>{1}</a>", somevalue1, somevalue2)

Or it probably leaves open door for injection attacks?

So how would I insert a hyperlink within a string?

I guess I could do with HyperLink class, but then is there any property that returns html code for the class object?

Answer 1

The below uses HyperLink and should work. However, consider whether you really need an intermediate string in the first place.

using System.Web.UI;
using System.Web.UI.WebControls;

using System.IO;

HyperLink link = new HyperLink(){NavigateUrl="http://stackoverflow.com", Text = "StackOverflow"};
StringWriter sw = new StringWriter();
HtmlTextWriter htw = new HtmlTextWriter(sw);
link.RenderControl(htw);
sw.Close();
String rendered = sw.ToString();