Files
30-seconds-of-code/snippets/js/s/escape-html.md
2023-05-10 22:35:09 +03:00

34 lines
742 B
Markdown

---
title: Escape HTML
type: snippet
language: javascript
tags: [string,regexp]
cover: above-the-rocks
dateModified: 2021-10-13T19:29:39+02:00
---
Escapes a string for use in HTML.
- Use `String.prototype.replace()` with a regexp that matches the characters that need to be escaped.
- Use the callback function to replace each character instance with its associated escaped character using a dictionary object.
```js
const escapeHTML = str =>
str.replace(
/[&<>'"]/g,
tag =>
({
'&': '&amp;',
'<': '&lt;',
'>': '&gt;',
"'": '&#39;',
'"': '&quot;'
}[tag] || tag)
);
```
```js
escapeHTML('<a href="#">Me & you</a>');
// '&lt;a href=&quot;#&quot;&gt;Me &amp; you&lt;/a&gt;'
```