Skip to content

🔒 Escapes HTML characters and JavaScript line terminators

License

Notifications You must be signed in to change notification settings

rtsao/safe-string

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

10 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

safe-string

build status dependencies status npm version

Escapes HTML characters and JavaScript line terminators

Adapted from serialize-javascript.

The use case of this module is to safely embed content into a <script> element within an HTML document.

Usage

const safeString = require('safe-string');

const string = JSON.stringify({foo: '</script>'});
// => '{"foo":"</script>"}'

const escaped = safeString(string);
// => '{"foo":"\u003C\u002Fscript\u003E"}'

const html = `<script type="application/json">${escaped}</script>`;
// => '<script type="application/json">{"foo":"\u003C\u002Fscript\u003E"}</script>'

const parsed = JSON.parse(escaped);
// => {foo: '</script>'}

See Also

About

🔒 Escapes HTML characters and JavaScript line terminators

Resources

License

Stars

Watchers

Forks

Packages

No packages published