尝试通过ajax发布到数据库时转义URI。 我究竟做错了什么？

Question

I'm grabbing the src attribute from an image tag and posting it to my database via an ajax call which is then used to form an XML file. I really need to escape this image path and seem to be quite stumped on how to do this. Trying to use the encodeURIComponent without much luck. Below is my code. Thanks for any help!

$('.drag-elem').each(function () {
    var xml = '<clother><id>' + $(this).children('img').attr('class') + 
        '</id><title>' + $(this).children('img').attr('alt') + '</title><z-index>' +
        $(this).css('z-index') + '</z-index><top>' + $(this).css('top') + 
        '</top><left>' + $(this).css('left') + '</left><file>' + 
        encodeURIComponent($(this).children('img').attr('src')) +
        '</file></clother>';
});

Answer 1

You must use encodeURI. Because encodeURIComponent isn´t good for full paths.

---

Try to use a xml encode function (encodeXml) clearing your xml from amps:

var xml_special_to_escaped_one_map = {
'&': '&',
'"': '"',
'<': '&lt;',
'>': '&gt;'
};

var escaped_one_to_xml_special_map = {
'&amp;': '&',
'&quot;': '"',
'&lt;': '<',
'&gt;': '>'
};

function encodeXml(string) {
return string.replace(/([\&"<>])/g, function(str, item) {
return xml_special_to_escaped_one_map[item];
});
};

function decodeXml(string) {
return string.replace(/(&quot;|&lt;|&gt;|&amp;)/g,
function(str, item) {
return escaped_one_to_xml_special_map[item];
});
}

From here: http://dracoblue.net/dev/encodedecode-special-xml-characters-in-javascript/155/

Answer 2

hard to say since it looks all good to me. tried reproducing and is fine in my browser.

try changing javascript library (jquery?) and try another browser. And try breaking down the string to variables to nail the problem.