30-seconds-of-code/snippets/js/s/escape-html.md

title, type, language, tags, cover, dateModified

title	type	language	tags	cover	dateModified
Escape HTML	snippet	javascript	string regexp	above-the-rocks	2021-10-13T19:29:39+02:00

Escapes a string for use in HTML.

• Use String.prototype.replace() with a regexp that matches the characters that need to be escaped.
• Use the callback function to replace each character instance with its associated escaped character using a dictionary object.

const escapeHTML = str =>
  str.replace(
    /[&<>'"]/g,
    tag =>
      ({
        '&': '&amp;',
        '<': '&lt;',
        '>': '&gt;',
        "'": '&#39;',
        '"': '&quot;'
      }[tag] || tag)
  );

escapeHTML('<a href="#">Me & you</a>');
// '&lt;a href=&quot;#&quot;&gt;Me &amp; you&lt;/a&gt;'