在 JavaScript 中转义双引号

Question

I'm a student who has to deal with an intern hacking challenge. I'm that far that I'm able to insert JavaScript code.

My one and only problem... I can't use single quotes since the firewall blocks it.

Double quotes are giving me an error because of double use:

<a id="bb" href="javaSCRIPT&colon;document.body.innerHTML = "lol"">clicks</a>

How can I use the above line of code, just like using single quotes?

<a id="bb" href="javaSCRIPT&colon;document.body.innerHTML = 'lol'">clicks</a>

(Try it in an empty HTML document, please.)

Answer 1

This should work for you;

<a id="bb" href="javascript&colon;document.body.innerHTML=&quot;foo&quot;">clicks</a>

Here's an example: http://jsfiddle.net/49ay5jwf/