escaping html markup

Question

I'm building a html table using javascript on the fly and I want to add a cell that may contain html markup. I do not want that markup interpreted but simply displayed.

  LogHTML += "<tr><td>" + data + "</td></tr>";

How can I do that? Is there some function or html markup that will accomplish that?

I tried pre but then I get extra spaces.

Every major JS library has the code to do that, don't re-invent the wheel. — Itay Moav -Malimovka, Sep 24 '11 at 13:00
possible duplicate of [Can I escape html special chars in javascript?](http://stackoverflow.com/questions/6234773/can-i-escape-html-special-chars-in-javascript) — Alex K., Sep 24 '11 at 13:02

score 1 · Accepted Answer · answered Sep 24 '11 at 13:01

1

LogHTML += "<tr><td>"+data.replace(/</g,"&lt;")+"</td></tr>";

That's all you need.

answered Sep 24 '11 at 13:01

Niet the Dark Absol

320,036
81
464
592

Thanks, See article referenced above for a function to handle this and other cases. – Mike D Sep 24 '11 at 14:11

score 1 · Answer 2 · answered Sep 24 '11 at 13:02

The best solution is to use DOM instead of innerHTML and to create text node for data.

But you can try this as a quick solution or

function htmlentities(s){
    var div = document.createElement('div');
    var text = document.createTextNode(s);
    div.appendChild(text);
    return div.innerHTML;
}

escaping html markup

2 Answers2