Escape Class
Provides utility methods for escaping strings.
Item Index
Methods
- _htmlReplacer static
- html static
- regex static
Methods
_htmlReplacer
-
match
Regex replacer for HTML escaping.
Parameters:
-
match
StringMatched character (must exist in HTML_CHARS).
Returns:
html
-
string
Returns a copy of the specified string with special HTML characters escaped. The following characters will be converted to their corresponding character entities:
& < > " ' / `
This implementation is based on the OWASP HTML escaping
recommendations. In addition to the characters in the OWASP
recommendations, we also escape the `
character, since IE
interprets it as an attribute delimiter.
If string is not already a string, it will be coerced to a string.
Parameters:
-
string
StringString to escape.
Returns:
regex
-
string
Returns a copy of the specified string with special regular expression characters escaped, allowing the string to be used safely inside a regex. The following characters, and all whitespace characters, are escaped:
- $ ^ * ( ) + [ ] { } | \ , . ?
If string is not already a string, it will be coerced to a string.
Parameters:
-
string
StringString to escape.