Preventing HTML and Script injections in Javascript

by

You can encode the < and > to their HTML equivelant.

html = html.replace(/</g, "&lt;").replace(/>/g, "&gt;");

How to display HTML tags as plain text

More Related Contents:

  1. Invoking JavaScript code in an iframe from the parent page
  2. Capture HTML Canvas as gif/jpg/png/pdf?
  3. Adjust width and height of iframe to fit with content in it
  4. How to get numeric value from a prompt box? [duplicate]
  5. How to set value of input text using jQuery
  6. How do I get the information from a meta tag with JavaScript?
  7. getElementById() returns null even though the element exists [duplicate]
  8. How to display JavaScript variables in a HTML page without document.write
  9. Text blinking jQuery
  10. How to mute all sound in a page with JS?
  11. How to resize html canvas element?
  12. Opening new window in HTML for target=”_blank”
  13. Nesting quotes in JavaScript/HTML
  14. How to display div after click the button in Javascript? [duplicate]
  15. Looping through files for FileReader, output always contains last value from loop
  16. HTML5 callbacks?
  17. Dark mode flickers a white background for a millisecond on reload
  18. How to save canvas animation as gif or webm?
  19. getElementsByClassName() with two classes
  20. Attribute onclick=”function()” not functioning as intended?
  21. Sorting a list by data-attribute
  22. How to trigger CSS “hover state” using Javascript? [duplicate]
  23. Check if a file exists locally using JavaScript only
  24. Is there an equivalent of canvas’s toDataURL method for SVG? [closed]
  25. Rotate div text after clicking on button using jquery and css
  26. How much data / information can we save / store in a QR code?
  27. html5/Javascript – How to get the Selected folder name?
  28. Do duplicate ID values screw up jQuery selectors?
  29. Split text into pages and present separately (HTML5)
  30. Can you have multiple lines in an element?

Leave a Comment