Is there js function that replace xml Special Character with their escape sequence?

Question

I search the web alot and didn't find js function that replace xml Special Character with their escape sequence?
Is there something like this?

I know about the following:

Special Character   Escape Sequence Purpose  
&                   &           Ampersand sign 
'                   '          Single quote 
"                   "          Double quote
>                   >            Greater than 
<                   &lt;            Less than

is there more? what about writing hexadecimal value like 0×00,
Is this also a problem?

Answer 1

I have used this:

function htmlSpecialChars(unsafe) {
    return unsafe
    .replace(/&/g, "&")
    .replace(/</g, "&lt;")
    .replace(/>/g, "&gt;")
    .replace(/"/g, "&quot;")
    .replace(/'/g, "&apos;");
}

Answer 2

这里有一个有趣的 JS 库： Client side HTML encoding anddecode

Answer 3

您可以使用PHPJS 项目中的PHP htmlspecialchars 。

Answer 4

This is similar to Can I escape html special chars in javascript?

The accepted answer there is this:

function escapeHtml(unsafe) {
    return unsafe
         .replace(/&/g, "&")
         .replace(/</g, "&lt;")
         .replace(/>/g, "&gt;")
         .replace(/"/g, "&quot;")
         .replace(/'/g, "&#039;");
 }

However, if you're using lodash, then I like cs01's answer from that post:

_.escape('fred, barney, & pebbles');
// => 'fred, barney, & pebbles'

Answer 5

This is old, but my favorite way to do it is to let the browser figure it out:

function encodeXML(data){
    var d = document.createElement('div');
    d.appendChild(document.createTextNode(data));
    return d.innerHTML;
}

encodeXML('&');

Output:

"&"

You could also use d.innerText = data; or d.textContent = data; , but createTextNode() has the most browser support.

Answer 6

Those are the only characters you need to worry about.

Generally you should be using a DOM interface to build XML documents then you don't need to worry about manually escaping things. That only becomes an issue if you are mashing together strings to build the XML.