History

root ab9f8bb658 first commit		2020-02-06 10:09:39 +00:00
..
.npmignore	first commit	2020-02-06 10:09:39 +00:00
CHANGELOG.md	first commit	2020-02-06 10:09:39 +00:00
LICENSE	first commit	2020-02-06 10:09:39 +00:00
README.md	first commit	2020-02-06 10:09:39 +00:00
htmlescape.js	first commit	2020-02-06 10:09:39 +00:00
package.json	first commit	2020-02-06 10:09:39 +00:00

README.md

htmlescape

Properly escape JSON for usage as an object literal inside of a <script> tag. Use htmlescape in place of JSON.stringify. For more info see JSON: The JavaScript subset that isn't.

Transformations

from	to
`&`	`\\u0026`
`>`	`\\u003e`
`<`	`\\u003c`
`\u2028`	`\\u2028`
`\u2029`	`\\u2029`

Usage

var htmlescape = require('htmlescape');
htmlescape({prop:'value'});
//=> '{"prop":"value"}'

Or in your templates:

<script>
var payload = <%= htmlescape(payload) %>;
</script>