Escape HTML and Javascript tags

Question

I have a editable textbox. If I will enter alert('Hi'); , then it saves properly. After saving it will forward to a list page where that text box value will be a hyperlink. If we click on that hyperlink then alert displays. But we want to escape this. Can any one have the resolution for this ? Thanks in advance

Try encodeURIComponent and find its encodeRFC5987ValueChars example. — fuyushimoya
– fuyushimoya, Commented Jun 23, 2015 at 7:35
Lets say I have a text box. <input type="text" name="studentName"> . When I will enter some text " <script> alert('Hi');</script> " . then it behaves like a javascript. Hence it alert comes up onload of the page — John
– John, Commented Jun 23, 2015 at 7:37

Ahs N · Accepted Answer · 2015-06-23 07:44:40Z

1

Before the text is saved for further processing or display, replace all "<" by "<" and replace all ">" by ">"

answered Jun 23, 2015 at 7:44

Ahs N

8,3961 gold badge30 silver badges34 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Escape HTML and Javascript tags

1 Answer 1

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

Comments

Your Answer

Sign up or log in

Post as a guest

Related