need to ignore if there is any single quote char in value come from expression language without breaking javascript code

Question

I am getting a value from the server and directly assigning it to a field using javascript. Below is the code.

document.getElementById('myid')='<%= myServerValue%>';

But the issue is when myServerValue contains single quote javascript functionality collapsed. Since it is like document.getElementById('myid')='myvalue'isx'; [there is a single quote]

Please tell me a solution. Using double quotes too will not be a good option, since myServerValue could contain double quotes also...

See [single quote escape](http://stackoverflow.com/questions/8744315/single-quote-escape-in-javascript-function-parameters). — Steven Liao, Sep 17 '13 at 06:50
I need some client side solution using javascript, not a server side solution. — Chathura, Sep 17 '13 at 06:57
<%= myServerValue%> looked like server code to me? Is it not server side code? — hazimdikenli, Sep 18 '13 at 07:29

score 0 · Answer 1 · answered Sep 17 '13 at 06:48

0

try HttpUtility.JavaScriptStringEncode

answered Sep 17 '13 at 06:48

hazimdikenli

5,709
8
37
67

score 0 · Answer 2 · answered Sep 17 '13 at 07:01

You need to encode your characters at the server and somehow decode it in the javascript code. There are a few possibilities to achieve that, you can use UTF8 like in this demo The escape and unescape javascript methods are obsolete but you can try String.fromCharCode.

score 0 · Answer 3 · answered Sep 17 '13 at 07:02

0

This no the most clean solution, but it will work just as it is.

document.getElementById('myid')="<%= myServerValue%>";

answered Sep 17 '13 at 07:02

Oleg Belousov

9,981
14
72
127

need to ignore if there is any single quote char in value come from expression language without breaking javascript code

3 Answers3

Linked