. "Use the HttpUtility.HtmlEncode method to encode output if it contains input from the user or from other sources such as databases." . . . .