23 lines
379 B
JavaScript
23 lines
379 B
JavaScript
|
|
||
|
|
/*!
|
||
|
|
* EJS
|
||
|
|
* Copyright(c) 2010 TJ Holowaychuk <tj@vision-media.ca>
|
||
|
|
* MIT Licensed
|
||
|
|
*/
|
||
|
|
|
||
|
|
/**
|
||
|
|
* Escape the given string of `html`.
|
||
|
|
*
|
||
|
|
* @param {String} html
|
||
|
|
* @return {String}
|
||
|
|
* @api private
|
||
|
|
*/
|
||
|
|
|
||
|
|
exports.escape = function(html){
|
||
|
|
return String(html)
|
||
|
|
.replace(/&(?!\w+;)/g, '&')
|
||
|
|
.replace(/</g, '<')
|
||
|
|
.replace(/>/g, '>')
|
||
|
|
.replace(/"/g, '"');
|
||
|
|
};
|
||
|
|
|