How can I escape double quotes from a text input in javascript?

Question

In a variable, string data is coming from text input like following.

var noteStr="<?php echo $_REQUEST["noteStr"];?>";

If user given any double quotes in text input then javascript give an error as expected. I am not finding a way to use javascript str.replace() in this scenario because before using that on string variable javascript engine generate errors.

How can i solve this problem using javascript? Advance thanks for help.

possible duplicate of [HtmlSpecialChars equivalent in Javascript?](http://stackoverflow.com/questions/1787322/htmlspecialchars-equivalent-in-javascript) — kemicofa ghost, May 12 '15 at 08:58

score 1 · Answer 1 · edited May 23 '17 at 11:52

1

Use PHP function htmlspecialchars().

var noteStr="<?php echo htmlspecialchars($_REQUEST["noteStr"]); ?>";

And here's JavaScript equivalent:

function escapeHtml(text) {
  var map = {
    '&': '&amp;',
    '<': '&lt;',
    '>': '&gt;',
    '"': '&quot;',
    "'": '&#039;'
  };

  return text.replace(/[&<>"']/g, function(m) { return map[m]; });
}

Source: HtmlSpecialChars equivalent in Javascript?

edited May 23 '17 at 11:52

Community

1
1

answered May 12 '15 at 08:50

Jazi

6,569
13
60
92

I need to know how this can be handle using javascript – karim_fci May 12 '15 at 08:51

bozzmob · Answer 2 · 2015-05-12T09:05:10.720

There is an awesome inbuild function in Javascript. escape() funtion.

<script>

document.write(escape("Hello friends? Here is the solution!"));

</script>

Will become-

Hello%20friends%3F%20Here%20is%20the%20solution%21

Check out- http://www.w3schools.com/jsref/tryit.asp?filename=tryjsref_escape for reference

This can also be achieved by using Prototype in Javascript. A simple example-

var str = '<div class="article">This is an article</div>';
document.write( str.escapeHTML() );

Will become-

&lt;div class="article"&gt;This is an article&lt;/div&gt;

Source : http://www.tutorialspoint.com/cgi-bin/practice.cgi?file=prototype_83

Hope it helps! :)

escape function is deprecated in javascript. – karim_fci May 12 '15 at 09:05 — karim_fci, May 12 '15 at 09:05

How can I escape double quotes from a text input in javascript?

2 Answers2