Javascript Escape Characters

Question

I have kind of a lazy form that has two textboxes. When I click a button I basically concatenate the two textboxes with a delimiter. Is there like a special delimiter that cannot actually be typed in an html textbox, even if the &#xxx; syntax is used?

Answer 1

No, if you want to disallow characters you'll have to add some sort of javascript to prevent them being entered. Or just remove them from each field before joining.

Answer 2

Why concatenate? How about using JSON?

A simple and safe concatenation format would be

<length of the first string> <space> <first string> <second string>

For example

'abcd' + 'foo' => '4 abcdfoo'

Answer 3

可以在文本字段中键入任何内容，这就是为什么清理所有用户输入如此重要的原因。