Skip to content

Instantly share code, notes, and snippets.

@jed
Forked from 140bytes/LICENSE.txt
Created May 10, 2011 16:38
Show Gist options
  • Save jed/964847 to your computer and use it in GitHub Desktop.
Save jed/964847 to your computer and use it in GitHub Desktop.
use cached DOM elements to escape HTML
function(
a // string to escape
){
return new // create a new
Option(a) // <option> element containing the HTML,
.innerHTML // and return its HTML.
}
function(a){return new Option(a).innerHTML}
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
Version 2, December 2004
Copyright (C) 2011 Jed Schmidt <http://jed.is>
Everyone is permitted to copy and distribute verbatim or modified
copies of this license document, and changing it is allowed as long
as the name is changed.
DO WHAT THE FUCK YOU WANT TO PUBLIC LICENSE
TERMS AND CONDITIONS FOR COPYING, DISTRIBUTION AND MODIFICATION
0. You just DO WHAT THE FUCK YOU WANT TO.
{
"name": "escapeHTML",
"keywords": ["escape", "escaping", "HTML", "XSS"]
}
@Daniel-Hug
Copy link

Here's the old version using the textNode's data property instead of nodeValue (browser support IE5+, and everything else):

var escapeHTML = (function() {
    var el = document.createElement('b'),
        textNode = el.appendChild(document.createTextNode(''));
    return function(str) {
        textNode.data = str;
        return el.innerHTML;
    };
})();


Minified (132 bytes):

function(a,b){a=(b=a.createElement('b')).appendChild(a.createTextNode(0))
return function(s){a.data=s
return b.innerHTML}}(document)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment