Skip to content

Instantly share code, notes, and snippets.

@ffafara

ffafara/esacpeHTML.js

Last active August 29, 2015 14:25
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save ffafara/8947d194358e4808b734 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save ffafara/8947d194358e4808b734 to your computer and use it in GitHub Desktop.
Download ZIP
escape HTML
Raw
esacpeHTML.js
// Use the browser's built-in functionality to quickly and safely escape the string
function escapeHtml(str) {
var div = document.createElement('div');
div.appendChild(document.createTextNode(str));
return div.innerHTML;
};
// UNSAFE with unsafe strings; only use on previously-escaped ones!
function unescapeHtml(escapedStr) {
var div = document.createElement('div');
div.innerHTML = escapedStr;
var child = div.childNodes[0];
return child ? child.nodeValue : '';
};
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment