Escape HTML

Escape HTML special characters to prevent XSS attacks and ensure safe rendering.

Code

Utilities
str.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#039;');

Parameters

The string containing HTML to escape.

Browser·fetch() may be limited by CORS

More JavaScript Snippets