Html Encode method encodes a particular string to be displayed in a browser. It is important to encode strings prior it’s rendering in the page, mainly to avoid cross-site script injection (XSS) and HTML injection attacks. However, developers so often forget to call the encode function.
Html Decode method decodes a particular string which is encoded.
Encoding and decoding is needed in somewhere like
·  Pass the values from one page to another.
·  Access the URL or pass the URL.
·  Fetch the data or insert data in Database.
·  Read the xml data or insert data in xml.
·  Change the special character from string
·  And security purpose etc.
In ASP.Net we used the following encode and decode method are
·  Server.HtmlEncode()
·  Server.HtmlDecode()
·  Server.HtmlUrlEncode()
·  Server.HtmlUrlDecode ()
·  HttpUtility.UrlEncode()
·  HttpUtility.UrlDecode ()
Example1:
string strData="?data??"; 
Response.Write(Server.HtmlEncode(strData)); //Encode the value here
Example2:
string strUrl=Request.Url.ToString();//Request.Url get the url
Response.Write("<font color='green'>URL is:</font> " + strUrl +"<br/>");
Response.Write("<font color='green'>Encoded URL is: </font>" + HttpUtility.UrlEncode(strUrl));//Encoded Url Here
Output:
URL is: http://localhost:49714/WebSite8/Default.aspx
Encoded URl is: http%3a%2f%2flocalhost%3a49714%2fWebSite8%2fDefault.aspx