I would think twice before changing the data in the database especially not the longstring properties because they include a lot of codes for the editor to work. This is washed away when rendered to the browser if you use the XHTML editor, the data in the database is not XHTML. I would go for a method were you do the converting when rendered to the browser. There is several ways to do that depending on architecture of the system. One easy way would to override render method on a subclass from EPiServer.TemplatePage. And do the HTMLEncoding there before sending it to the response. Another way could be to inherit from EPiServer.WebControls.Property and override method AddedControl and switch on InnerProperty.Type and do work depending on PropertyDataType Example: protected override void AddedControl(System.Web.UI.Control control, int index) { base.AddedControl(control, index); switch(this.InnerProperty.Type) { case PropertyDataType.String : Label lbl = control as Label; if(lbl != null) { lbl.Text = System.Web.HttpContext.Current.Server.HtmlEncode(lbl.Text); } break; } } Code not verified! /HAXEN