Escape/ Unescape HTML?

[Philipp]

How do I convert a string to escaped HTML? (Let's say I'm not using
DOM.) E.g. "<p>foo</p>" would become "&lt;p&gt;foo&lt;/p&gt;"?

Reversely, how do I unescape a string to be HTML? E.g. "&lt;em&gt;"
would turn back into "<em>".

I mean a function like the following would do the job but is there a
more JS-native solution?

html = html.replace(/&/g, "&amp;");
html = html.replace(/</g, "&lt;");
html = html.replace(/>/g, "&gt;");
html = html.replace(/"/g, "&quot;");

Thanks!

 

[Evertjan.]

Philipp wrote on 20 dec 2007 in comp.lang.javascript:

How do I convert a string to escaped HTML? (Let's say I'm not using
DOM.) E.g. "<p>foo</p>" would become "&lt;p&gt;foo&lt;/p&gt;"?

Reversely, how do I unescape a string to be HTML? E.g. "&lt;em&gt;"
would turn back into "<em>".

I mean a function like the following would do the job but is there a
more JS-native solution?

Ever tried asking the natives? Oh you just did. ;-)

s = unescape(s);

the below is not unescape, but escape-ish:

 

[Thomas 'PointedEars' Lahn]

How do I convert a string to escaped HTML? (Let's say I'm not using
DOM.) E.g. "<p>foo</p>" would become "&lt;p&gt;foo&lt;/p&gt;"?

Reversely, how do I unescape a string to be HTML? E.g. "&lt;em&gt;"
would turn back into "<em>".

I mean a function like the following would do the job but is there a
more JS-native solution?

html = html.replace(/&/g, "&amp;");
html = html.replace(/</g, "&lt;");
html = html.replace(/>/g, "&gt;");
html = html.replace(/"/g, "&quot;");

`"' does not need to be escaped, however if this is what you are looking
for, then

function escapeHTML(s)
{
return s.replace(
/[&<>"]/g,
function(m)
{
var map = {
"&": "amp",
"<": "lt",
">": "gt",
'"': "quot"
};

return "&" + map[m] + ";";
});
}

and

function unescapeHTML()
{
return s.replace(
/&(amp|[lg]t|quot);/g,
function(m, p1)
{
var map = {
amp: "&",
lt: "<",
gt: ">",
quot: '"'
};

return map[p1];
});
}

may very well be the answer.


PointedEars