Skip to content

Function: escapeHtml()

escapeHtml(value): string

Escape the five characters significant in HTML text and double-quoted attribute values (&, <, >, ", ') so an untrusted string can be interpolated into markup without breaking out of its context. & is replaced first so ampersands introduced by the later replacements aren’t double-escaped.

string

string