How to escape JavaScript in JSP?

by

The forward slash is not an escape character. That’s the backslash. 

${fn:replace(Desc, "'", "\\'")}

(yes, it’s been presented twice, because that’s also an escape character in Java!)

However, you don’t only need to repace ' by \', you also need to replace \n (newlines) by \\n. The string is been printed over multiple lines, which makes it also an invalid JS string variable. Your final result must basically look like this:

var itemNameList=""
    + '\nWeyland Estate Santa Barbara Pinot Noir'
    + '\nRaymond \'Prodigal\' North Coast Cabernet Sauvignon'
    + '\nChateau Haute Tuque';

(please note that the syntax highlighter agrees on me here but not on yours)

There are however much more possible special characters which needs to be escaped. They are all covered by Apache Commons Lang StringEscapeUtils#escapeEcmaScript(). Much easier is to create a custom EL function which calls exactly that method. If not done yet, download and drop commons-lang.jar in /WEB-INF/lib. Then create a /WEB-INF/functions.tld file like follows:

<?xml version="1.0" encoding="UTF-8" ?>
<taglib 
    xmlns="http://java.sun.com/xml/ns/javaee"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xsi:schemaLocation="http://java.sun.com/xml/ns/javaee http://java.sun.com/xml/ns/javaee/web-jsptaglibrary_2_1.xsd"
    version="2.1">

    <display-name>Custom Functions</display-name>    
    <tlib-version>1.0</tlib-version>
    <uri>http://example.com/functions</uri>

    <function>
        <name>escapeJS</name>
        <function-class>org.apache.commons.lang3.StringEscapeUtils</function-class>
        <function-signature>java.lang.String escapeEcmaScript(java.lang.String)</function-signature>
    </function>
</taglib>

So that you can use it as follows:

<%@taglib prefix="util" uri="http://example.com/functions" %>
...
${util:escapeJS(Desc)}

More Related Contents:

  1. Escaping HTML strings with jQuery
  2. Escaping Strings in JavaScript
  3. Making a javascript string sql friendly
  4. How can I insert new line/carriage returns into an element.textContent?
  5. How do I escape a string inside JavaScript code inside an onClick handler?
  6. Javascript – Replacing the escape character in a string literal
  7. Unescape HTML entities in JavaScript?
  8. Regular expression to get a string between two strings in Javascript
  9. Regular Expression to get a string between parentheses in Javascript
  10. Insert a string at a specific index
  11. Is there a way to create a function from a string with javascript?
  12. Capitalize words in string [duplicate]
  13. Optimum way to compare strings in JavaScript? [duplicate]
  14. How to create streams from string in Node.Js?
  15. What does ${} (dollar sign and curly braces) mean in a string in JavaScript?
  16. How to insert variables in JavaScript strings?
  17. JavaScript replace() method dollar signs
  18. How can I use jQuery to style /parts/ of all instances of a specific word?
  19. Is there a JavaScript strcmp()?
  20. JavaScript Regex, where to use escape characters?
  21. What’s the point of new String(“x”) in JavaScript?
  22. How to escape a JSON string to have it in a URL?
  23. How to remove part of a string?
  24. Javascript unicode string, chinese character but no punctuation
  25. How to pass an EL variable to javascript
  26. JavaScript adding a string to a number
  27. Extract the text out of HTML string using JavaScript
  28. What is the difference between ‘ and ” in JavaScript?
  29. Split a string, at every nth position, with JavaScript? [duplicate]
  30. How to properly escape characters in regexp

Leave a Comment