If it returns an MvcHtmlString, it does not matter; <%: will know that it is pre-shielded. Therefore i would use <%: since the reviewer should not think, "is it shielded?" Or is it an unprocessed field? "
Of course, it depends on the code that creates the correct MvcHtmlString ...
source share