8ee50178f3
Correct: `Array.from()` (it’s a static method) Incorrect: `Array.join()` (doesn’t exist; it’s a prototype method) This patch uses the common `#` syntax to denote `.prototype.`.
25 lines
608 B
Markdown
25 lines
608 B
Markdown
### escapeHTML
|
|
|
|
Escapes a string for use in HTML.
|
|
|
|
Use `String.prototype.replace()` with a regexp that matches the characters that need to be escaped, using a callback function to replace each character instance with its associated escaped character using a dictionary (object).
|
|
|
|
```js
|
|
const escapeHTML = str =>
|
|
str.replace(
|
|
/[&<>'"]/g,
|
|
tag =>
|
|
({
|
|
'&': '&',
|
|
'<': '<',
|
|
'>': '>',
|
|
"'": ''',
|
|
'"': '"'
|
|
}[tag] || tag)
|
|
);
|
|
```
|
|
|
|
```js
|
|
escapeHTML('<a href="#">Me & you</a>'); // '<a href="#">Me & you</a>'
|
|
```
|