Escaped strings are safe to use inside inner HTML of most tags and in most quoted HTML attributes.
They are not NOT safe to use in <script> tags, unquoted attributes, href, onmouseover, and similar.
They must be unescaped first if they are used inside a context that would escape them.
Escape the given unescaped string.
Escaped strings are safe to use inside inner HTML of most tags and in most quoted HTML attributes. They are not NOT safe to use in
<script>
tags, unquoted attributes,href
,onmouseover
, and similar. They must be unescaped first if they are used inside a context that would escape them.Handles only
&
,<
,>
,"
, and'
.