How to avoid cross script attack to a data passed as javascript in ASP.NET?

See more:

ASP.NET

Javascript

C#3.5

I want to avoid cross script attack to a data passed as javascript in asp.net with c#. I am passing data in javascript where label data passed to the input html controls where data manipulation is being done from the pop up screen/window

document.getElementById('ctl00_cphDDS_lblSelectedOriginator').innerHtml = dialogWindow.CompanyName;

What I have tried:

Passing javascript function as below:

<pre>function showModalWindowForUtilityOIC_PAUT(cntrl) {
    if (SessionTimeOutRedirection()) {
        
        var Bank = document.getElementById('ctl00_cphDDS_ddlBankType').value;
        var dialogWindow = window.showModalDialog('ViewOIC.aspx?Bank=' + Bank + '&&Type=U&&InstructionCode=' + cntrl, 'mywindow', 'dialogWidth:875px; dialogHeight:400px; center:yes; status = no; toolbar = no; menubar = no');
        if (dialogWindow != null) {
          
            //Updated on 10.06.2019 for Cross Side Script Attack Start
            document.getElementById('ctl00_cphDDS_lblSelectedOriginator').innerHTML = dialogWindow.CompanyName;
          
            
        }
        return true;
    }
}