escape_javascript and single quotes

Question

I have this in a some_file.js.erb file

console.log("<%= escape_javascript(translate "I can't do that") %>")

Which outputs: I can't do that

I can't figure out why it is not rendering the single quote correctly. Any ideas?

Answer 1

您可以在字符串上使用html_safe方法。

console.log("<%= escape_javascript "I can't do that".html_safe %>")

Answer 2

That's exactly what escape_javascript is supposed to do. From the documentation for escape_javascript :

Escapes carriage returns and single and double quotes for JavaScript segments.

Answer 3

I believe the escaped JS won't give you HTML safe code

Try console.log("<%= escape_javascript "I can't do that".html_safe %>")

Answer 4

If you plan put some ruby code inside javascript,

then escape_javascript will not work even if you put .html_safe to it.

This works for me,

#{sanitize("content with ` single ` quote".gsub("'", "’"))}

=> replace all single quotes with `’` (html code)
=> sanitize helper to render it properly in view.