How do I escape a string inside JavaScript code inside an onClick handler?

by

In JavaScript you can encode single quotes as “\x27” and double quotes as “\x22”. Therefore, with this method you can, once you’re inside the (double or single) quotes of a JavaScript string literal, use the \x27 \x22 with impunity without fear of any embedded quotes “breaking out” of your string.

\xXX is for chars < 127, and \uXXXX for Unicode, so armed with this knowledge you can create a robust JSEncode function for all characters that are out of the usual whitelist.

For example,

<a href="#" onclick="SelectSurveyItem('<% JSEncode(itemid) %>', '<% JSEncode(itemname) %>'); return false;">Select</a>

More Related Contents:

  1. HTML-encoding lost when attribute read from input field
  2. Strip HTML from Text JavaScript
  3. Unescape HTML entities in JavaScript?
  4. Escaping HTML strings with jQuery
  5. What is the HtmlSpecialChars equivalent in JavaScript?
  6. Fastest method to escape HTML tags as HTML entities?
  7. How to convert characters to HTML entities using plain JavaScript
  8. Unescape HTML entities in JavaScript?
  9. Escaping Strings in JavaScript
  10. How to escape JavaScript in JSP?
  11. How do I escape a single quote ( ‘ ) in JavaScript? [duplicate]
  12. Making a javascript string sql friendly
  13. How can I insert new line/carriage returns into an element.textContent?
  14. Reformat string containing date with Javascript
  15. Create a string of variable length, filled with a repeated character
  16. Extract the text out of HTML string using JavaScript
  17. How to put “” in a javascript string?
  18. Escaping HTML entities in JavaScript string literals within the block
  19. Removing backslashes from strings in javascript
  20. Javascript – Replacing the escape character in a string literal
  21. Strip HTML tags from text using plain JavaScript
  22. Find and replace nth occurrence of [bracketed] expression in string
  23. Does jQuery strip some html elements from a string when using .html()?
  24. Determine if an HTML element’s content overflows
  25. Page content is loaded with JavaScript and Jsoup doesn’t see it
  26. Capture iframe load complete event
  27. What is the best way to parse html in google apps script
  28. Show a second dropdown based on previous dropdown selection
  29. Get object property name as a string
  30. hide open/active accordion when another accordion is clicked

Leave a Comment