使用UTF-8转义HTML字符？

Question

If my site is using UTF-8, is there any advantage/disadvantage to still escaping HTML characters? eg Using "& " instead of just " & "? What's the best practice?

Answer 1

You still need to escape characters that have a special meaning in HTML, like < , > , & , to avoid parser ambiguities/invalid syntax. That has nothing to do with the encoding. You don't need to escape every non-ASCII character though, like "ö" to ö , since you can natively represent them in the UTF-8 encoding.

Answer 2

you have to convert to entity < > & always, and " only when in a html attribute

for example

<a title="tell me &quot;more&quot;">

Answer 3

& is invalid HTML (it's an unterminated entity reference).
This has nothing to do with Unicode.